Senior Manager - IT Audit Support Service

AIA Group; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

AIA Group in Kuala Lumpur is seeking an experienced IT Audit Lead to drive the assessment of IT controls and ensure compliance with group policies and standards. You will manage regional IT audit engagements and contribute to building a cybersecurity competent Group IT audit team.

The role requires 15+ years in IT audit or information security, CISSP/CISA/CISM certifications, and strong English communication.

Qualifications

• Bachelor degree in IT or Computer Science or equivalent.
• 15+ years IT audit or information security experience, preferably regional.
• CISSP, CISA or CISM certifications with strong IT controls knowledge.
• Fluent English communication (spoken and written).
• Knowledge of cloud computing is advantageous.
• Experience in life insurance or financial services is a plus.

Responsibilities

• Assess effectiveness of IT controls to ensure compliance with policies and standards.
• Manage IT audit engagements per GIA Standards.
• Contribute to building a Group IT audit team with cybersecurity and security knowledge.
• Adjust IT audit plans based on changing IT controls and risk posture.
• Build relationships with IT management to stay informed on risks and changes.
• Prepare audit reports and lead discussions on remediation with management.
• Follow up on outstanding issues and ensure timely remediation.
• Coordinate with financial auditors on IT controls for key processes.
• Coach and develop junior staff and lead other duties as assigned.

Skills

IT audit experience

Cybersecurity knowledge

English communication

Cloud computing knowledge

Financial services experience

Education

University degree in IT or Computer Science

CISSP/CISA/CISM certifications

Job description

FIND YOUR BETTER AT AIA We don't simply believe in being 'The Best'. We believe in better - because there's no limit to how far 'better' can take us. We believe in empowering every one of our people to find their better - in the work they do, the career they build, the life they live and the difference they make. So that together we can support even more people - including our own - to live Healthier, Longer, Better Lives. If you believe in better, we'd love to hear from you. Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

About the Role

• Responsible for assessing the effectiveness of controls in information systems and related procedures to ensure compliance with AIA policies, procedures and standards
• Manage, execute and complete the assigned IT audit jobs in accordance with the GIA Standards
• Strong contribute of views is expected in order to build a Group IT audit team with relevant Cybersecurity, emerging technologies and technical security control knowledge
• Manage and adjust the IT audit plans based on the changing IT controls, risk posture, and/or business priority
• Build strong audit relationship with key IT Management via regular interaction so as to be informed of emerging risk issues and other key changes for assigned locations and BUs
• Prepare audit reports (with fieldwork auditors) in accordance with Quality Assurance Review requirements
• Lead/facilitate discussion of issues and remedial action plans with the appropriate levels of management
• Follow-up outstanding audit issues and monitor timely completion of agreed remedial actions by management
• Partner with financial auditors to assess application IT controls related to key business processes
• Proactively contribute to the development of the team through coaching, training and providing timely feedback to junior staff
• Take the initiative in improving self through classroom and on-the-job trainings
• Lead other responsibilities and duties periodically assigned by the Director of IT Audit in order to meet operational and/or other requirements

Job Requirements

• University graduate in IT or Computer Science or equivalent
• Minimum 15 years of working experience in IT audit, Information Security and/or other relevant experience, preferably with regional experience
• Certificate holder of Certified Information Systems Security Professional (CISSP)/ Certified Information Systems Auditor (CISA)/ Certified Information Security Manager (CISM) with strong understanding in IT controls and risks
• Excellent command of both oral and written English
• Proven experience in IT infrastructure, Cybersecurity, system development processes and/or other business continuity management
• Knowledge and experience in Cloud Computing is an advantage
• Experience in life insurance business or financial services industry is a definite advantage
• Energetic, result oriented, ability to work under pressure and self-motivated
• Good analytical, interpersonal and influencing skills
• Solid problem-solving skills, ability to analyse complex data, identify core issues, investigate, evaluate and reach appropriate conclusions
• Ability to direct and drive multiple engagement simultaneously