Head of Technology Audit (Cybersecurity)

Head of Technology Audit (Financial Institution) | Kuala Lumpur

About the company?

Our client is a leading international financial institution with a strong global presence. It is a systemically important institution with a mature, well-invested technology and security function. You will join Group Internal Audit team, which audits at group level and has real influence over how risk is managed across the organisation. The role also gives you exposure to emerging areas such as AI security and digital assets.

The Role

You will lead the delivery of high-risk technology and cyber security audits across the Group. Key responsibilities include:

• Planning, executing and reporting on cyber audits across IAM, vulnerability management, code security, SOC, threat intelligence, red/purple teaming and penetration testing
• Acting as Team Manager or Team Lead on integrated audits, with detailed review and supervision of the team's work
• Identifying and articulating risk impact, agreeing findings with management, and tracking remediation through to closure
• Contributing to the annual risk assessment and audit plan for the cyber portfolio
• Championing data analytics and AI-driven methods in audit delivery, and coaching auditors on cyber security topics

What We're Looking For

We want a technically strong practioner who can translate deep security knowledge into clear, defensible assurance.

(Open for candidates from 1st Line without Audit Experience)

You'll bring:

• 12+ years in IT audit, information security, technology risk management or related field
• Strong technical grounding in identity and access management, vulnerability management, security operations, threat intelligence and offensive security
• Working knowledge of industry frameworks such as NIST and CIS, and of cyber risk management practices
• Exposure to AI security and digital assets, which is highly desirable
• Strong stakeholder management, with the ability to communicate findings clearly to both technical and business audiences
• A degree in IT, Computer Science, Information Systems or a related field. CISA, CISSP, CEH, CCSP or GIAC is highly desirable, and CRISC, CISM or CIA is a plus

Ready to shape cyber assurance at a global player? Apply now.

JTK Number: JTKSM 995 | Company Registration Number: 201301019088 (1048918-T)