about the company
Our client is a well-established organisation with a significant regional presence and diverse business operations across Malaysia and Indonesia. The organisation is committed to strengthening its technology governance, cybersecurity resilience and enterprise risk management practices to support sustainable business growth.
...
about the job
We are seeking an experienced Manager / Senior Manager – IT Audit to lead and execute IT and cybersecurity audits across the Group. This role will play a key part in evaluating IT governance, cybersecurity controls, cloud security, technology risk management and digital resilience, while providing practical recommendations to strengthen the organisation’s overall control environment.
Key responsibilities include:
- Lead end-to-end IT and cybersecurity audits, including audit planning, fieldwork, control assessments and reporting.
- Assess IT governance, cybersecurity controls, cloud environments, ERP systems, IT infrastructure and operational technology (OT).
- Review key security domains, including identity and access management (IAM), network security, endpoint protection, vulnerability management, incident response, disaster recovery and third-party cyber risk.
- Evaluate compliance with internal policies, regulatory requirements and recognised cybersecurity frameworks.
- Enhance audit effectiveness through data analytics, AI, automation and continuous auditing techniques.
- Develop and improve IT audit methodologies, risk assessment approaches and cybersecurity assurance practices.
- Present audit findings and actionable recommendations to strengthen technology risk management and cybersecurity resilience.
- Collaborate with stakeholders across business and IT functions to address emerging technology risks and support continuous improvement.
Requirements
- Bachelor’s degree in IT, Computer Science, Cybersecurity, Information Systems or a related discipline.
- Manager: Minimum 6 years of relevant experience.
- Senior Manager: Minimum 10 years of relevant experience.
- Relevant experience in IT Audit, Cybersecurity, IT Risk, IT Consulting or Information Technology.
- Strong understanding of cybersecurity, cloud computing, IT governance and technology risk management.
- CISA certification is preferred; other relevant audit, risk or cybersecurity certifications are advantageous.
- Experience in data analytics, AI, audit automation or continuous auditing is an added advantage.
- Strong analytical, communication and stakeholder management skills.
- Willingness to travel within Malaysia and Indonesia when required.
about the manager/team
You will work closely with stakeholders across the Group’s business and IT functions, providing independent assurance and practical insights on technology and cybersecurity risks. This role offers the opportunity to contribute to the continuous enhancement of IT audit practices, influence risk management improvements and help strengthen the organisation’s technology and cybersecurity assurance capabilities.
