Senior IT Auditor – ISO Systems & Governance

SIRIM QAS International Sdn Bhd; Shah Alam; On-site; MYR 150,000 - 200,000; Full time

Job summary

A leading technology certification company in Malaysia is seeking an experienced Senior IT Auditor to lead IT management system audits and ensure compliance with ISO certification standards. The ideal candidate should have a Bachelor's degree in IT or related fields and at least 8 years of experience, with 4 years specifically in Cybersecurity or related sectors. Strong fluency in both Bahasa Malaysia and English is required, along with a valid driver’s license. The role offers the opportunity for travel and career advancement.

Qualifications

• Minimum 8 years of work experience with at least 4 years in Cybersecurity or related fields.
• Completion of related Lead Auditor courses is an advantage.
• Fluent in Bahasa Malaysia and English.

Responsibilities

• Plan, lead, and conduct IT management system audits following MSC accreditation requirements.
• Ensure audits meet ISO certification standards.
• Monitor and evaluate client systems for compliance.

Skills

IT management system audits

Cybersecurity

Data Center Operations

Application Development

Network & Communication

Business Continuity

ISO certification standards

Education

Bachelor’s degree in Information Technology or related fields

Job description

Senior IT Auditor – ISO Systems & Governance

SIRIM Berhad is a well‑established corporate entity responsible to lead and enhance technology and quality in Malaysia. We urgently seek qualified and dynamic professionals who are ready for a challenging career to join us as:

We are seeking an experienced Senior Auditor to join the Management System Certification Department (Commercial, Services & IT) at SIRIM QAS International Sdn Bhd. In this role, you will lead and conduct IT management system audits, ensuring compliance with international certification standards such as ISO 9001, ISO 27001, ISO 20000‑1, and ISO 22301.

Responsibilities

Plan, lead, and conduct IT management system audits following MSC accreditation requirements and annual business targets.

Ensure audits meet ISO certification standards and identify improvements to enhance audit processes.

Monitor and evaluate client systems to assess compliance with ISO 9001, ISO 27001, ISO 20000‑1, and ISO 22301 standards.

Contribute to the development of systems and procedures to maintain accreditation standards.

Requirements

Bachelor’s degree in Information Technology, Computer Science, or related fields such as Cybersecurity, Artificial Intelligence, Software Engineering, Network & Communication, Application Development, Business Continuity, or Network Engineering.

Minimum 8 years of work experience, with at least 4 years in Cybersecurity, Data Center Operations, Artificial Intelligence, Network & Communication, Application Development, or Business Continuity‑related fields.

Knowledge and Certifications

• ISO 9001 (Quality Management System)
• ISO 27001 (Information Security Management System)
• ISO 20000‑1 (Service Management System)
• ISO 22301 (Business Continuity Management System)

Completion of related Lead Auditor courses is an advantage.

Experience in sectors such as government, financial & banking, information technology, and security.

Third‑party auditing/inspection/certification experience is an advantage.

Fluent in Bahasa Malaysia and English (spoken and written).

Willing to travel and must possess a valid driver’s license and own transport.

Interested candidates are invited to apply online not later than 7 Dec 2025. Only shortlisted candidates will be notified.

SIRIM Group is committed in ensuring the confidentiality, protection, security and accuracy of your personal information made available to SIRIM GROUP in accordance with the Personal Data Protection Act 2010. It is your obligation to ensure that all personal information submitted and retained is accurate, not misleading, updated and complete in all aspects. SIRIM Group and/or its employees or authorised officers or agents will not be responsible for any personal information submitted by you that is inaccurate, misleading, incomplete or not updated.

Application Process

Your application will include the following questions:

• What’s your expected monthly basic salary?
• Which of the following types of qualifications do you have?
• How many years’ experience do you have as an auditor?
• How would you rate your English language skills?
• How much notice are you required to give your current employer?
• How many years’ experience do you have as an ISO Auditor?