Technology Assurance & Cyber Risk Auditor

Maxis; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Maxis, Malaysia's leading converged solutions company, is seeking an experienced IT Audit professional to provide independent assurance over technology, cybersecurity, cloud, data, AI, and digital platforms. You will assess risks, governance, and control effectiveness to safeguard business objectives and regulatory compliance.

You will conduct risk-based audits across IT environments, review IAM/PAM, vulnerability management, SDLC, DevOps, and telecom tech, and collaborate with Risk, Security,

Qualifications

• Bachelor's degree required in IT/CS/Engineering or related field.
• 7–10 years' experience in IT Audit, technology assurance, or cybersecurity.
• Professional certifications (CISA, CISSP, AWS/GCP) highly preferred.

Responsibilities

• Conduct risk-based audits across technology, cybersecurity, cloud, data, and telecom environments.
• Assess IT governance, risk management and internal controls.
• Review IAM, PAM, vulnerability management, SOC operations, and incident response.
• Evaluate cloud governance, security, and data protection.
• Assess software delivery processes including SDLC, Agile, and DevOps.
• Prepare and present audit reports to Senior Management and Audit Committee.
• Collaborate with Risk, Security, Compliance, Privacy, and Technology stakeholders.
• Monitor remediation of audit findings and action plans.

Skills

Risk-Based Thinking

IT Audit Experience

Cybersecurity Knowledge

Education

Bachelor's Degree in IT/CS/Engineering

CISA / CISSP / AWS/GCP Security Certifications

Job description

Maxis, Malaysia's leading converged solutions company, is seeking an experienced IT Audit professional to provide independent assurance over technology, cybersecurity, cloud, data, AI, and digital platforms. You will assess risks, governance, and control effectiveness to safeguard business objectives and regulatory compliance.

You will conduct risk-based audits across IT environments, review IAM/PAM, vulnerability management, SDLC, DevOps, and telecom tech, and collaborate with Risk, Security,