IT Auditor

About The Job IT Auditor

IT Auditor

Role Overview

We are seeking a highly qualified IT Auditor/IT Compliance Officer to ensure that the company's IT operations comply with industry regulations and internal policies. This role will involve auditing IT processes, identifying security risks, and ensuring compliance with Bank Negara Malaysia (BNM), PCI DSS, SWIFT, and other relevant regulatory frameworks. The ideal candidate must have excellent communication skills, an in-depth understanding of security best practices, and be prepared to travel internationally as required.

The successful candidate will need to manage the IT compliance posture across our offices, including Singapore, Malaysia, and potential projects in Dubai, Hong Kong, and other international locations.

Key Responsibilities

Auditing & Compliance:

• Conduct comprehensive internal audits of IT processes and operations to ensure compliance with industry standards such as BNM, MAS, PCI DSS, SWIFT, and company policies.
• Identify potential security risks and ensure that proper controls are in place to mitigate them.
• Ensure compliance with financial industry regulations and collaborate with stakeholders to close any audit findings.
  
  

Security & IT Governance

• Provide expert advice on IT security, focusing on implementing policies and controls that protect the organization's assets.
• Review and maintain the company's IT security policies to ensure they comply with regulatory requirements and industry best practices.
• Work closely with external auditors and vendors to coordinate third-party assessments.
  
  

Documentation & Reporting

• Prepare detailed audit reports, outlining compliance findings and recommending corrective actions.
• Maintain all compliance-related documentation and ensure it is updated regularly to reflect changes in regulatory requirements.
  
  

Risk Assessment

• Perform IT risk assessments to identify vulnerabilities and recommend improvements.
• Collaborate with IT teams to ensure that adequate security controls are in place and effective.
  
  

Training & Awareness

• Conduct regular training sessions to raise awareness about IT compliance and security standards among employees.
• Promote a culture of compliance within the organization by developing and sharing best practices.
  
  

Travel Requirements

• Be open to international travel to Singapore, Dubai, Hong Kong, and other locations as required for compliance reviews, audits, or vendor management.
  
  

Certifications

Key Requirements:

• Must hold one or more of the following certifications:
• CISSP (Certified Information Systems Security Professional) Mandatory
• CISA (Certified Information System Auditor Certification) Best to have
• CCSP (Certified Cloud Security Professional) Best to have
  

Experience

• Minimum of 3-5 years of experience in IT auditing or compliance in a regulated environment (preferably in Fintech or Financial Services).
• In-depth knowledge of IT risk management, security frameworks, and compliance with industry standards such as Bank Negara Malaysia, Monetary Authority Singapore, PCI DSS, and SWIFT.
  
  

Technical Skills

• Strong understanding of IT security best practices.
• Experience working with compliance tools and methodologies to perform risk assessments and audits.
  
  

Language Requirements

• Must be proficient in English (read, write, and speak fluently).
• Conversational skills in Chinese are required.
  
  

Consultant In Charge

Tracy Lee | 010 391 2633 | [email protected]

Ken Ng | +6019-213 2628 | [email protected]