About the role
We are seeking an IT Internal Auditor to join our team in Petaling Jaya. As an IT Internal Auditor, you will play a critical part in identifying risks, evaluating controls and recommending improvements across our technology operations.
Key Responsibilities
- Plan, lead, and manage IT audit engagements, including defining scope, risk assessment, and audit program design.
- Evaluate IT General Controls (ITGC), Cybersecurity, Enterprise Resource Planning (ERP) systems such as SAP S/4HANA, cloud systems and other digital platforms.
- Review IT policies, procedures and controls against recognized standards and good practices, including ISO 27001, ISO 20000 and the National Institute of Standards and Technology (NIST) frameworks.
- Perform thematic or advisory reviews on IT governance, cybersecurity, and digital resilience.
- Perform data analytics using audit analytical tool.
- Assist engagement with the senior management to communicate key risks and provide recommendations.
- Oversee follow-up reviews and monitor remediation implementation.
- Provide technical guidance, mentoring, and on-the-job coaching to team member.
Requirements
- Degree in IT, Computer Science, Information Systems, Cybersecurity or a related discipline.
- Certified Information Systems Auditor (CISA) certification is highly preferred. Candidates who are currently pursuing CISA or will obtain the certification within an agreed timeframe upon appointment may also be considered.
- Minimum of three (3) years of experience in IT Audit, Cybersecurity, or IT Governance.
- Ability to lead IT audit engagements and guide junior team members.
- Strong understanding of ITGC, cybersecurity, ERP systems, cloud environments, systems development life cycle, and IT governance frameworks such as COBIT, NIST and ISO standards.
- Strong in analytical and problem-solving skill.
- Good report writing, interpersonal and communication skills.
- Expected to travel. Having your own transportation is an advantage.
