KEY ACCOUNTABILITIES
- Assist with the development of the annual audit plans for IT related audits.
- Lead and perform the full cycle of IT audits, including risk assessment, planning, fieldwork and reporting.
- Ensure assigned audits are completed in a timely manner and within the set timeline.
- Evaluate effectiveness and efficiency of internal controls in audits performed.
- Identify weaknesses in control activities, and ensure management develop action plans that address control weaknesses identified. Where applicable make value-added recommendations for process improvements.
- Communicate audit findings to local management via conducting of closing meetings at the end of fieldwork review.
- Develop and improve IT auditing techniques (e.g. risk assessment and data analytics), and assist in creating a standard library of IT audit programs to be used across the regions.
- Review and follow-up on status of remedial action plans and submit periodic reports to Management and Audit Committee.
- Perform ad hoc tasks and special projects reviews as assigned from time to time.
- To develop a collaborative, partnership relation with Auditees and Business Units across the entity.
- Assist with operational and business audits, and perform integrated audits.
- Provide IT guidance and training to team members.
- Participate in IT related management steering committee (ie. ITSC) and provide input from internal audit perspective.
QUALIFICATIONS / EXPERIENCE
- Bachelor's degree or professional certificate holder in IT field with focus on information systems. Additional certification such as CISA, CISM, CISSP, CIA or comparable would be an added advantage.
- Minimum 10 years working experience with 5 years working experience as a Manager or a Senior Manager in audit. Prior audit experience in an insurance or a Takaful company is a plus.
- Extensive exposure in information system, cyber security and auditing. Ideally, this experience should be gain from Big 4 accounting firm, information systems and financial industry IT internal audit function.
- Familiarity with professional standards.
- Familiarity with Life Asia system is a plus.
KNOWLEDGE & TECHNICAL SKILLS
- Good knowledge of family takaful / life insurance / banking industry trends, regulations, and business processes in Malaysia/across South East Asia
- Excellent knowledge of IT audit methodologies, IT project management, and IT governance frameworks.
- Knowledge of IT security controls, prevention tools and cybersecurity trends.
- Experience in IT System development methodologies (e.g. SDLC, Agile) and cloud computing.
- Understanding of core takaful/insurance admin systems and platforms is an advantage.
- Data analytical experience a plus.
- Excellent written and verbal communication skills.
- Confident and can engage with senior management and stakeholders.
- Enthusiastic and motivated self-starter with the ability to work autonomously with analytical thinking and meet deadlines.
- Collaborator and team player.
