Job Title: Senior Manager – Group Internal Audit (IT Audit)
Work location: Kuala Lumpur, Malaysia
Mode of work: Onsite (Work from Office)
Local Malaysians only
About the Role
We are looking for an experienced Senior Manager – Group Internal Audit (IT Audit) to support enterprise-wide IT audit initiatives across global business units. The role involves planning, executing, and delivering IT audits while providing independent assurance on IT risk management, governance, cybersecurity controls, and internal control effectiveness.
The ideal candidate should possess strong experience in IT audit, ISO 27001 assessments, cybersecurity/cloud audits, and regulated industry environments such as insurance or banking.
Key Responsibilities
- Lead and execute end-to-end IT audits across Group Office and local markets, including planning, fieldwork, reporting, and issue follow-up.
- Assess IT governance, cybersecurity, cloud security, network security, AI-related controls, and application development processes.
- Prepare clear, concise, and high-quality audit reports highlighting risks, root causes, and actionable recommendations.
- Contribute to the development and enhancement of the annual IT audit plan and audit methodologies.
- Design and implement audit tools, frameworks, and methodologies to improve audit efficiency and effectiveness.
- Act as a subject matter expert and provide guidance to country IT auditors and audit teams.
- Monitor and validate timely closure of audit findings and management action plans.
- Manage external consultants for IT audits and ISO 27001 certification audits.
- Engage with senior stakeholders including CTOs, IT leadership teams, and audit committees across regions.
- Support continuous improvement initiatives related to IT risk management and internal audit practices.
Required Skills & Experience
- Bachelor's degree in Information Technology, Computer Science, Accounting, Data Analytics, or related disciplines.
- Minimum 5+ years of relevant IT Audit experience, preferably within Internal Audit functions.
- Strong experience in IT risk assessment, governance, and internal audit methodologies.
- Hands-on experience with ISO/IEC 27001 audits or Information Security Management Systems (ISMS).
- Experience in cybersecurity, cloud security, network security, or application security audits.
- Experience working within insurance, banking, or other regulated environments.
- Strong analytical, problem-solving, and stakeholder management skills.
- Excellent written and verbal communication skills with the ability to prepare professional audit reports.
- Experience working independently across multiple geographies and managing complex audit engagements.
- Practical exposure to data analytics techniques for audit planning and execution.
Preferred Qualifications
- Professional certifications such as CISA, CISM, CISSP, or equivalent.
- Exposure to AI governance and emerging technology risk assessments.
- Experience managing external audit consultants and cross-functional audit teams.
- Knowledge of cloud platforms, SDLC controls, and enterprise security frameworks.
- Prior experience in multinational or global enterprise environments is preferred.
