Senior Executive, Technology Assurance

Job Summary

The Deputy Director reports to the Head of the Technology Assurance Department and is responsible for leading a team of auditors in the planning, executing and managing internal audit activities related to technology systems, networks and cybersecurity across the organization. This role involves evaluating the effectiveness of technology controls, identifying risks, and contributing to the enhancement of the organization's technology governance and security practices.

Job Responsibilities:

Audit Planning and Execution

• Lead and supervise a team of auditors by providing guidance, coaching, and evaluations.
• Plan and execute comprehensive audits of technology, networks, IT and cybersecurity to identify areas of risk and improvement.
• Coordinate audit activities and assignments within the team, ensuring proper allocation of resources and timely completion of tasks.
• Analyze audit findings, develop recommendations, and prepare clear and comprehensive audit reports for management and relevant stakeholders.
• Review working papers and reports for quality, completeness and accuracy.

Technology Assessment, Security Evaluation and Controls

• Conduct assessments of technology, infrastructure, systems, applications, and data protection mechanisms to identify vulnerabilities and risks.
• Evaluate the adequacy and effectiveness of IT and technology controls, security protocols, and technology risk management practices.

Cross-Functional Collaboration and Stakeholder Engagement

• Lead the audit team in working with cross-functional teams to address audit findings and facilitate the implementation of corrective actions.
• Communicate audit findings and recommendations professionally to relevant stakeholders through clear written reports and verbal presentations.
• Lead the audit team in engagement with senior management, business units, and external regulators/auditors to understand risks and foster a culture of compliance and good governance.
• Provide advisory support by contributing to key decision-making process and providing insights on risk, compliance and audit matters.

Reporting and Communication

• Communicate audit findings and recommendations professionally to relevant stakeholders through clear written reports and verbal presentations.
• Follow up on implementation of agreed audit recommendations and report progress.

Data Analytics

• Integrate data analytics into audit planning and execution to enhance the effectiveness, efficiency, and risk coverage of assurance activities.
• Analyze datasets to identify patterns, anomalies, and key risk indicators, and translate findings into actionable audit insights.
• Collaborate with audit teams to ensure analytics outputs are aligned with audit objectives and contribute to impactful reporting and decision-making.

Continuous Improvement & Professional Development

• Contribute to the continuous improvement of internal audit processes and methodologies to optimize audit quality and efficiency.
• Stay informed about changes in regulations, industry standards, and best practices to enhance the audit and compliance function.
• To continuously improve self-competency and skills for better audit outcomes.
• Foster a culture of ethics, integrity, and accountability within the team and the organization.

Enhancement of Technology Assurance Framework

• Strengthen the technology assurance framework by identifying and implementing best practices, tools, and methodologies that improve the effectiveness and efficiency of technology-related audit activities.

Others

• To provide operational support for Audit & Assurance Division on non-routine or unspecified assignments such as cross functional audit, special review or investigation, as and when required.
• Collaborate with other departments within the same division, i.e. Audit and Compliance, Quality and Risk Assurance, as week as others such as Risk Management, Integrity & Governance, Legal, Finance and operation departments to ensure a holistic approach to audit and compliance.

Qualification & Work Experience

• Bachelor's degree in Computer Science, Cybersecurity, Network, Information Technology or related field.
• A Master's Degree is an advantage.
• Knowledge of cybersecurity frameworks or standards (e.g. IS027001, GDPR PDPA, CUBIT). Certification(s) e.g. Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), CUBIT.
• Minimum 5 years of experience in IT, Cybersecurity auditing or a related role.
• Strong understanding of audit methodologies, risk assessment, and internal control frameworks.
• Familiarity with relevant regulations and standards in the telecommunications and multimedia industry.
• Excellent communication and interpersonal skills, including the ability to convey complex findings to various stakeholders.
• Proficient in data analytics using audit software and tools to enhance audit testing such as ACL, Power BI or IDEA for data extraction. analysis and visualization.
• Strong problem-solving abilities and a proactive approach to identifying issues and proposing solutions.
• Commitment to upholding ethics, integrity, and professionalism.
• Knowledge of the Malaysian Communications and Multimedia Commission's functions and regulations is a plus.

Technical Competencies/Skills

• Internal Audit Standards & Methodology
• Strong understanding and application of IIA International Standards for the Professional Practice of Internal Auditing and audit lifecycle methodology (planning, fieldwork, reporting, follow-up).
• Regulatory Compliance
• Familiarity with relevant laws, regulations, and compliance requirements applicable to the industry.
• Risk Assessment & Internal Controls
• Ability to assess risk exposures and evaluate the effectiveness of governance, risk management, and control processes.
• Data Analytics
• Proficient in using tools such as ACL, IDEA, Excel (advanced), Power BI, or SQL for data mining, analysis, and visualization to support audit testing and decision-making.
• Report Writing
• Strong ability to prepare clear, concise, and insightful audit and compliance reports tailored to different stakeholders.

Behavioral Competencies/Skills

• Integrity and confidentiality
• Leadership and supervisory
• Teamwork and collaboration
• Professional Skepticism
• Stakeholder management
• Analytical thinking and detailed oriented
• Problem solving
• Adaptability

Candidate must be willing to work in MCMC HQ, Cyberjaya.