Executive, Audit (PID 2247485) - Petronas Malaysia

Position Summary:

The role involves planning and executing PDB Group assurance and advisory services, including e-money operations. This includes aligning audit scopes with the audit planning memorandum and regulatory requirements, providing practical recommendations, and performing data analytics to support the annual audit plan. The role also emphasizes maintaining confidentiality and providing assurance on governance, risk, and controls to enhance PDB Group's value.

Job Description:

1. Audit Planning: Highly involve in planning and executing data gathering activities with PDB Group business representatives and the internal planning team to support the audit planning.
2. Risk & Control Assessment Risk: Develop complete preliminary Risk and Control Assessment Matrix (RCAM) to identify, assess and document risks and controls in the assigned scope to determine any control gaps and to formulate the audit testing procedure.
3. Audit Testing & Analysis: Conduct audit testing based on the agreed methodology and RCAM to evaluate internal controls' adequacy and effectiveness. Analyze results from audit testing and benchmark against industry standards, regulatory requirements, professional practices, and best practices to verify identified gaps.
4. Audit Execution and Reporting: Execute end-to-end audit activities, including developing RCAM, Audit Testing Matrix, Audit Planning Memorandum, and Audit Planning Guide. Conduct problem analysis using industry standards and data analytics. Develop concrete audit findings with evidence, propose actionable recommendations, and produce concise audit reports for and exit meetings to close control gaps and improve processes.
5. Documentation and Audit Integrated Analytics: Completing audit documentation and conducting periodic reviews. Reviewing the effectiveness of audit systems, identifying areas for improvement, and implementing initiatives to enhance audit performance and quality. Provides advice on compliance and adequacy of control processes during the planning and development phases of new major products, systems, or technology operations.

Qualifications:

• Bachelor’s degree in Accounting, Finance, Economics, Computer Science, Information Technology, or any related field.
• Possession of any of the following certifications i.e Certified Information Systems Auditor (CISA) and Certified Internal Auditor (CIA)

Requirements:

• Minimum of 5 to 7 years of work experience, preferably in auditing IT financial services.
• Experience in performing Risk Management in Technology (RMiT) audits.
• Exposure to financial services institutions, e-money industry, fintech industry or other related fields
• Proficiency in main operating systems, infrastructure, security control requirements, ERP systems, and business risks related to IT controls
• Knowledge of systems development, change management, logical access security, network security, contingency planning, and recovery.
• Familiarity with business process automation, end-user computing controls, and industrial control systems (e.g., Process Control Networks).
• Expertise in cybersecurity, including standards, compliance frameworks, information handling, security risks, threat intelligence, and protection mechanisms.

Application close on 17th January 2025