Assistant Manager/Manager, IT Internal Audit

Role Purpose:

Responsible for planning and conducting IT audit assignments across the Group to assess the effectiveness of IT controls, identify risks and control gaps, and recommend practical improvements.

Key Responsibilities:

• Plan, execute, and complete IT audit assignments covering IT General Controls (ITGC) and application controls.
• Review key IT controls, including user and privileged access management, segregation of duties, system change management, IT operations, incident handling, and backup, recovery, and restoration processes.
• Conduct periodic user access reviews and assess whether access rights are appropriate.
• Perform walkthroughs and control testing on key business and operational systems, including Infor M3, Warehouse Management System (WMS), Microsoft Dynamics 365 Business Central, Quarto plantation system, and other applications used across the Group.
• Assess system controls relating to user roles, workflow approvals, data processing, system interfaces, reconciliations, and data integrity.
• Develop audit programmes, testing procedures, and well-structured audit working papers.
• Prepare clear audit reports outlining findings, risks, root causes, and practical recommendations.
• Track audit findings and follow up with IT and business stakeholders on remediation progress.
• Coordinate and support external IT audits and cybersecurity assessments.
• Monitor the implementation of ITGC and cybersecurity-related recommendations.
• Support the development of internal audit coverage for cybersecurity risks.

Requirements:

• Diploma or Degree in Information Technology, Computer Science, Information Systems, or a related discipline.
• Good understanding of IT General Controls, system access controls, and operational IT environments.
• Minimum 5–7 years of experience in IT audit, ITGC testing, or IT support with audit exposure for the Assistant Manager level, and 8–10 years for the Manager level.
• Strong analytical, report-writing, communication, and stakeholder-management skills.
• Able to work independently and manage audit assignments from planning through completion.

Added Advantages:

• Professional certification such as CISA or CRISC.
• Experience in FMCG, manufacturing, plantation, warehousing, or other operational environments.
• Exposure to ERP, WMS, Microsoft Dynamics, or similar business systems.
• Knowledge of cybersecurity controls and risks.
• Experience using SQL, Power BI, or other data analytics tools.