Job Purpose:
Group Head Technology Audit is responsible to enhance the overall organizations internal control through systematic evaluation, risk assessment and continuous process improvement covering technology function within MBSB Berhad and its subsidiaries (MBSB Group). Assist the Group Chief Internal Auditor (GCIA) to provide the Senior Management and Board Audit Committee/Group Audit Committee, with a fair, independent and objective assessment of internal control, risk management and governance for MBSB Group. Support and collaborate with GCIA to provide an advisory/consultancy to other division heads, making recommendations on improving internal controls, risk management and governance when required.
Key Responsibilities:
1. Group Functions:
- Assist and support the GCIA in providing comprehensive oversight of MBSB Group's functions particularly in Group Technology Audit matters. This includes aligning technology risk management, and compliance practices across the organization, fostering synergies between MBSB's subsidiaries (i.e. MBSB Bank & MIDF Group), and its parent entity, and ensuring that strategic objectives are met consistently across all levels of the group.
- Assist the GCIA in developing and implementing the Group Internal Audit Division's (GIAD) strategy in alignment with the organization's risk management framework. Collaborate with the GCIA to align the Group Technology Audit plan with the overall internal audit strategy and addresses MBSB Group's key risks and priorities.
- Help maintain high standards audit quality when performing audit for MBSB Group to ensure adherence to the GIAD's Audit practices, professional standards and other best practices in auditing, which include the International Standards for the Global Internal Audit Standards (GIAS), GIAD's Manual, etc.
- Assist the GCIA to develop and review audit policies/procedures to guide the audit team for MBSB Group.
- Stakeholder Engagement within MBSB Group (support the GCIA to work closely with various stakeholders to facilitate audit processes and ensure cooperation with the GIAD function, the board of directors, senior management, external stakeholders).
2. Planning & Execution:
- Assist the GCIA in planning, risk assessment and development of the GIAD and Group Technology Annual Audit Plan and subsequently its presentation to GBAC/BAC for approval.
- Assist the GCIA and contribute to identifying and assessing risks and vulnerabilities especially in technology areas to ensure that audit plans address high-risk areas.
- Provide data or insights to support the GCIA in developing a comprehensive risk-based audit approach covering all activities, application system, outsourcing, third party vendors of MBSB Group for submission to the relevant committees i.e. BAC/GBAC/Board of Directors including input from the senior management and/or other relevant stakeholders.
- Manage and monitor the execution of approved Annual Audit Plan for Group Technology Audit are completed within timeframe.
- Perform investigative audit and other ad-hoc requests as requested by the Board Audit Committees or Senior Management.
- Assist GCIA in reviewing and providing feedback with respect to policies and procedures and other consultancy services as requested by Management.
- Support and collaborate with GCIA to provide an advisory/consultancy to other division heads, making recommendations on improving internal controls, risk management and governance when required.
- Assisting GCIA in managing GIAD's cost/expenditure incurred is as per approved budget.
3. Audit Reporting, Gap Identification and Follow-up:
- Guide and assist audit team leaders/members in preparing audit planning, audit work programme, audit findings, audit reports and annually assist the GCIA review the audit standards/manual to guide the internal audit function and ensure the quality of services and assurance delivered.
- Mentor and develop team members skills and knowledge by utilizing data analytics and technology to enhance audit processes and performance.
- Support and guide the audit team members in discharging their assigned duties and responsibilities during the audit work processes and/or gaps identification.
- Challenge and review the identification and evaluation of risks arising from the business activities prior to presentation of audit findings to the GCIA, sign off on audit reports and provide opinion and viable solutions on the same to the management, board audit committee and board of directors upon requests by management or board.
- Ensure that audit findings and detailed audit report under Group Technology Audit purview are well documented, reported, and communicated to relevant stakeholders.
- Participate and assist the GCIA present findings in the Board Audit Committees to ensure clear communication of key issues that affect MBSB Group's operational effectiveness.
- Monitor follow-up audit and action plans are being carried out in timely manner.
- Assist the GCIA in providing requests from the external/BNM's auditors to facilitate effective transfer of information on MBSB Group's overall regulatory controls and financial health.
- Support the GCIA in collaboration with other departments to develop and maintain a strong governance framework.
- Support and work closely with GCIA to drive initiatives for process improvement and innovation within the GIAD's function.
4. Talent Management:
- Assist the GCIA in identifying talent development within GIAD to ensure succession planning is in place for GIAD's long term leadership stability.
- Assist the GCIA in identifying suitable training and development programs for self and team members to ensure continuous effective performance and staff development program.
- Provide knowledge sharing session/coaching to section head, team leader and team members within Group Technology Audit as well as within GIAD.
- Assist GCIA in monitoring and reviewing staff's performance.
- Attend relevant meetings and provide consultative service in internal controls as relief to GCIA (when required).
Requirements:
1. Qualification:
- Bachelor's degree in information technology, Finance and Accountancy, Business Administration, Economics, or a related field
- Professionally certified i.e. CISA, CISM, CISSP etc.
- Possess specialize technical competencies such as Cybersecurity Penetration Tester, Programmer etc. is an added advantage
2. Experience:
- More than 10 years in auditing work or relevant work experience in Technology Audit for Financial Institutions with at least 7 years in supervisory role.
3. Skills:
- Sound understanding of technological areas in banking operations and relevant regulatory requirements such as Risk Management in Technology Policy.
- Risk-based audit and internal control framework
- Strong thought process, inquisitive, analytical, possess critical thinking, good communication and report writing skills
- Strong leadership and people management
- Communication/ interpersonal skills
- Self-directing, ability to coordinate and direct others
- Ability to work efficiently and independently
- Forward thinking and multitasking
