Assistant General Manager Information Technology & Information Security (Audit) Specialist (Contract)

ABOUT THE JOB

This role serves as a subject matter expert and advisor for the unit responsible for overseeing the internal audit portfolio related to Information Technology & Information Security (IT & IS). Responsibilities include conducting critical audit reviews using a systematic and disciplined approach to evaluate and enhance the effectiveness of control, governance processes, and risk management within the organization.

KEY RESPONSIBILITIES

• Work closely with HoU(s) in GIA to propose and acquire the approval for yearly audit activities within the areas Information Technology and Information Security (IT & IS) based on the evaluation of risk assessment, business and operation plan, passed audit issues, strategic focus and available resources.
• Lead, manage and assist the planned audit or any critical adhoc/specialized/cross functional audit with high proficiency and professional care as stipulated in the International Professional Practices Framework (IPPF) and in accordance to Internal Audit charter and Audit Manual.
• Identify and prioritize IT & IS risks facing the organization, including cybersecurity threats, data breaches, system failures, and compliance deficiencies. Evaluate the impact and likelihood of risks and develop risk mitigation strategies.
• Monitor compliance with laws, regulations, and industry standards (e.g., GDPR, ISO 27001, PCI DSS, NIST) related to IT & IS governance, security, and privacy. Assess the organization's adherence to established policies and procedures.
• Research and benchmark on the best practices in IT & IS, explore the latest development, disseminate knowledge and provide advisory to GIA auditors on audits related to IT & IS.
• Manage, guide and develop the required skills for all IT & IS auditors.
• Develop, drive and maintain IT & IS audit best practices within Group Internal Audit (GIA).
• Collaborate with management, IT & IS personnel, and external auditors to address audit findings and recommendations. Provide guidance and support to facilitate remediation efforts and enhance internal controls.
• Continuously ensure proactive personal development in audit skill, soft skills and business skills.

MUST HAVE

Bachelor or Degree in Business/ IT/ Computer Science/ Software Systems Development/Cybersecurity or any related field. MBA will be an added advantage.

Certified Internal Auditor (CIA)/ Certified Information Systems Auditor (CISA)/ Information Technology Infrastructure Library (ITIL) certifications, Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH) or any other related professional qualification is preferred.

Minimum of 9 years experience in IT or IS auditing, System Architecture and Applications or any related field.

WE VALUE

Strong business acumen and possess organisation & cultural diversity awareness.

Strong communication skill (written and verbal) and persuasive.

Analytical, critical and strategic thinker with good problem solving and decision making skills.

LOCATION

TM Annexe, Jalan Pantai Jaya, 59200 Kuala Lumpur