Senior Manager, Information Technology (IT) Audit

Tranglo; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Tranglo is seeking a Senior Manager, IT Audit to lead IT audits across the Group and oversee Operations Audit. The role demands strengthening IT governance, cybersecurity and incident response while aligning with regulatory requirements and internal policies.

You will guide audit planning, review findings for clarity and practicality, and report progress to the Board Audit Committee and senior leadership. Strong leadership and communication skills are essential.

Qualifications

• Extensive IT audit and risk management experience.
• Strong knowledge of COBIT, ITIL and ISO/IEC 27001.
• Leadership track record and clear board communication.

Responsibilities

• Lead IT audits across the group and oversee operations audit.
• Develop and maintain IT audit universe and annual plan.
• Review findings, present to Board Audit Committee and senior management.
• Coach the IT audit team and ensure remediation of issues.

Skills

IT Audit Leadership

Regulatory Knowledge

Risk Assessment

Communication to Board

Education

CISA

CISSP

ISO/IEC 27001 Lead Auditor

CRISC

Tools

COBIT

ISO/IEC 27001

ITIL

Job description

Tranglo’s business and operations are highly dependent on technology to support secure and reliable payment and remittance services. We are looking for an experienced Senior Manager, IT Audit to lead and oversee IT audits across the Group. The role will be primarily responsible for IT Audit and will also provide oversight of Operations Audit, which is led and managed by the Internal Audit Manager.

Roles and Responsibilities

• Maintain and enhance the IT audit universe by keeping abreast of changes in Tranglo’s systems, technology infrastructure, cybersecurity environment and IT operations.
• Develop and propose the annual IT audit plan and audit scopes based on key technology risks, business developments, regulatory requirements and emerging risks.
• Lead, supervise and coach the IT audit team in planning and conducting audits covering areas such as IT governance, cybersecurity, system development and change management, user access management, infrastructure and network security, vulnerability management, data centre operations, business continuity and disaster recovery.
• Assess the design and effectiveness of IT controls against applicable regulatory requirements, internal policies and recognised frameworks and standards, including COBIT, ITIL and ISO/IEC 27001.
• Review audit work and reports to ensure that findings are adequately supported, risks are clearly articulated and recommendations are practical and appropriate to Tranglo’s operations.
• Lead audit exit meetings and discuss key findings, risks and recommendations with relevant management and auditees.
• Monitor the remediation of IT audit findings and ensure that outstanding issues are appropriately followed up and escalated where necessary.
• Provide oversight of Operations Audit, which is led by the Internal Audit Manager, including reviewing key audit scopes, significant findings and audit reports.
• Present significant audit findings, key technology risks and the status of remediation actions to the Board Audit Committee and Board, where required.
• Support other Internal Audit activities and perform ad-hoc reviews or assignments as required.

Requirements

• Minimum 10 years of relevant experience in either IT Audit, Information Security, Cybersecurity, IT Risk or IT Governance, preferably with significant internal audit experience.
• At least one (1) relevant professional certification, such as CISA, CISSP, ISO/IEC 27001 Lead Auditor, CRISC, CompTIA, CREST, GPEN or equivalent. ISO/IEC 27001 Lead Auditor certification is preferred.
• Good working knowledge of recognised IT governance, risk and control frameworks and standards, such as COBIT, ISO/IEC 27001 and ITIL.
• Demonstrated experience in a supervisory or managerial role, including leading and developing teams conducting IT audits.
• Good understanding of technology risks and controls relating to payment/remittance systems, cybersecurity, IT infrastructure, application systems and technology operations.
• Knowledge of applicable Malaysian regulatory requirements, particularly Bank Negara Malaysia requirements relating to Money Services Business and Risk Management in Technology (RMiT), would be an advantage.
• Strong analytical skills with the ability to identify key risks, assess control weaknesses and recommend practical improvements.
• Strong written and verbal communication skills in English, with the ability to communicate audit matters effectively to senior management, the Board Audit Committee and the Board.
• Experience in the financial services, payments, remittance or fintech is preferred.