Internal Audit Executive (IT Audit)

Job Summary

The Internal Audit Executive (IT Audit) is responsible for conducting independent audits of the Company's IT systems, infrastructure, applications, and technology-related processes to ensure the effectiveness of internal controls, information security, regulatory compliance, and risk management practices. The role supports the Internal Audit function in identifying control gaps and recommending improvements to strengthen the Company's IT governance.

---

Key Responsibilities

• Conduct functional risk assessment and compliance review with Bank Negara Malaysia (BNM) guidelines, internal policies, regulatory requirements, and industry best practices related to information technology and information security.
• Conduct risk-based assessments to identify weaknesses in IT controls and recommend practical improvements.
• Evaluate the adequacy and effectiveness of IT general controls (ITGC), application controls, cybersecurity controls, and IT governance processes.
• Assess IT processes, including user access management, change management, the system development life cycle (SDLC), backup and recovery, incident management, and IT operations.
• Perform IT audits in accordance with the approved annual audit plan and internal audit methodology.
• Keep abreast of emerging technology risks, cybersecurity threats, and changes in regulatory requirements relevant to the Company's business.
• Support investigations into IT-related incidents, system control weaknesses, or suspected policy violations when required.

---

Qualifications

• Bachelor's Degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Accounting, Internal Audit, or a related discipline.
• Professional certifications such as CISA, CIA, CISSP, CRISC, or equivalent are an advantage.

---

Experience

• Minimum 3–4 years of experience in IT Audit, Information Security, IT Risk, Internal Audit, or related fields.
• Experience in banking, fintech, payment services, e-money, or financial institutions is preferred.
• Familiarity with IT control frameworks such as COBIT, ISO/IEC 27001, NIST, or similar frameworks is an advantage.

---

Skills & Competencies

• Good understanding of IT General Controls (ITGC), application controls, and information security principles.
• Knowledge of IT governance, risk management, and internal control frameworks.
• Ability to analyse IT processes, identify control gaps, and recommend improvements.
• Strong analytical, documentation, and report writing skills.
• Good communication and stakeholder management skills.
• High level of integrity, professionalism, and attention to detail.
• Ability to work independently and manage multiple audit assignments within deadlines.