Specialist - IT Audit

Marsh McLennan Asia Business Services (MMABS) is seeking candidates for the following position at Kuala Lumpur, Corporate Tower:

Specialist - IT Audit

What can you expect?

• A fast-paced environment with great culture and leadership.
• Passionate team members who are dedicated to business enablement
• Hybrid workplace model

What is in it for you?

• Provide high quality support to the Operations business across the Pacific Region.
• IT related training opportunities

We will count on you to:

• Provide relevant information to key stakeholders to effectively manage information and risk across the organization.
• Work with audit teams to identify the compliance requirements impacting our organization, the IT Controls in place that support those requirements, and any gaps that need to be closed.
• Collaborate across IT teams to develop and track plans to close compliance and IT Control gaps.
• Understand the purpose of various IT systems, tools and applications and how their function relates to the audits being conducted.
• Facilitating delivery of evidence for miscellaneous internal and external audits
• Scheduling and facilitating walkthroughs with auditors and stakeholders
• Following up on requests for evidence and audit responses
• Working with ARM team on corrective action plan wording

What you need to have:

• At least 4-5 years of relevant experience in work experience in IT audit, risk management, or information security
• Basic understanding of IT systems, networks, and infrastructure.
• Significant experience with Microsoft Office Suite.
• The ability to articulate business/technical requirements to IT teams and business users.
• Demonstrated ability to meet deadlines in a fast-paced environment.
• The ability to learn and use tools (eg. ServiceNow) to extract relevant reports and audit evidence
• Excellent verbal and written communication skills

​

What makes you stand out:

• Knowledge of Security frameworks including NIST CSF, NIST SP800-53 and ISO 27001.
• Knowledge of regulatory laws impacting global IT organizations (e.g., Sarbanes-Oxley, NYDFS Cybersecurity Regulation, CPS 234, China PIPL, etc.).
• Knowledge of MMC’s risk and compliance landscape (SOC 2, PCI DSS, SOX) and IT General Computer Controls (GCC’s).

Marsh McLennan (NYSE: MMC) is the world’s leading professional services firm in the areas of risk, strategy and people. The Company’s more than 85,000 colleagues advise clients in over 130 countries. With annual revenue of $23 billion, Marsh McLennan helps clients navigate an increasingly dynamic and complex environment through four market-leading businesses. Marsh provides data-driven risk advisory services and insurance solutions to commercial and consumer clients. Guy Carpenter develops advanced risk, reinsurance and capital strategies that help clients grow profitably and pursue emerging opportunities. Mercer delivers advice and technology-driven solutions that help organizations redefine the world of work, reshape retirement and investment outcomes, and unlock health and well being for a changing workforce. Oliver Wyman serves as a critical strategic, economic and brand advisor to private sector and governmental clients. For more information, visit marshmclennan.com, or follow us on LinkedIn and X.

Marsh McLennan is committed to creating a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.

Marsh McLennan is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh McLennan colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person