Senior Specialist, Technology Audit

GXBank; Selangor; On-site; MYR 100,000 - 130,000; Full time

Job summary

A leading digital bank in Malaysia seeks an experienced IT audit professional to lead and execute technology audits. The ideal candidate will possess over 8 years of experience in IT/Technology audit and strong skills in data analytics tools such as Power BI and SQL. Key responsibilities include planning audits, assessing IT governance, and presenting findings to stakeholders. This role offers the chance to make impactful contributions in a fast-paced banking environment, aligning audits with regulatory standards and internal policies.

Qualifications

• Bachelor's degree in Computer Science or equivalent from a recognized institution.
• Minimum 8 years of audit experience in IT/Technology audit.
• Related certifications like CISA, CISSP preferred.

Responsibilities

• Planning and executing technology audits aligned with policies and regulations.
• Developing data-driven audit programs for IT governance and cybersecurity.
• Presenting findings to senior stakeholders.

Skills

IT audit frameworks

Data analytics tools

Risk and control assessment

Cloud infrastructure

Communication skills

Interpersonal skills

Education

Bachelor's degree in Computer Science/Information System

Tools

Power BI

Tableau

SQL

Python

Job description

GX Bank Berhad - the Grab-led Digital Bank - is the the FIRST digital bank in Malaysia, approved by BNM to commence operations. We aim to leverage technology and innovation to serve the financial needs of the unserved and underserved individuals, and micro and small medium enterprises.

We are driven by our shared purpose and passion to bring positive transformation to the banking industry, starting with solutions that addresses the financial struggles of Malaysians and businesses.

Responsibilities

• Planning and executing end-to-end technology audits, including risk assessment, scoping, fieldwork and reporting, in line with internal policies and procedures, regulatory requirements and industry best practices.
• Developing and executing data-driven audit programs that assess IT governance, cybersecurity, cloud environments, infrastructure, data management, systems development and business continuity risks.
• Staying current with regulatory developments and Bank Negara Malaysia’s IT-related regulations and guidelines, and incorporating them into audit focus areas.
• Leveraging data analytics and automation tools (e.g., Power BI, Tableau, SQL, Python) to enhance audit efficiency and control testing.
• Supporting the Head, Technology Audit and participating in the Core Internal Audit Management Team, contributing to strategic and operational initiatives.
• Collaborating with audit team members, leading discussions, providing quality assurance over work papers and guiding junior staff throughout the audit lifecycle.
• Presenting clear and impactful findings to senior stakeholders and following up on remediation efforts to ensure timely closure of issues.
• Drafting audit reports that are concise, risk-focused and aligned with Internal Audit methodology.
• Participating in or leading ad hoc reviews, thematic audits or special investigations as required.
• Proactively escalating significant control gaps or emerging risks to senior management.
• Building strong, collaborative relationships with business and technology stakeholders, acting as a credible risk advisor.
• Continuously improving internal audit practices, particularly in areas of data analytics, audit automation and emerging technology risk coverage.

Requirements

• Bachelor's degree in Computer Science/ Information System (or equivalent) or higher from a globally recognised institution.
• Related certifications (i.e. CISA, CISSP, CIA, CRISC, AWS Certification or similar) are preferred.
• Minimum 8 years of audit experience in IT/ Technology audit, Information & Cyber Risk Management, Digital Platforms and Technology Risk functions, preferably in the financial services sector.
• Strong understanding and hands-on experience with IT audit frameworks, risk and control assessment methodologies, and Agile audit techniques.
• Solid grasp of modern and emerging technologies including cloud infrastructure (AWS), DevOps/CI-CD practices, API security, data governance and service-oriented architectures
• Familiarity with regulatory requirements and industry standards such as BNM RMiT, MAS TRM, ISO 27001, NIST, COBIT and ITIL.
• Demonstrated ability to independently develop and execute audit plans, evaluate control effectiveness and identify areas for improvement with risk-based focus.
• Ability to use data analytics tools (e.g., Power BI, Tableau, SQL, Python, ACL) and the ability to integrate analytics into audit testing and reporting is preferable.
• Excellent written and verbal communication skills, with the ability to clearly present complex audit findings to senior stakeholders. High level of initiative, integrity, and independence, with the ability to thrive in a fast-paced, VUCA startup environment.
• Strong interpersonal skills and the ability to build trusted relationships with stakeholders across business and technology teams.
• A continuous improvement mindset with a passion for innovation, learning, and delivering value-added insights.