Manage outsourced internal audit function in terms of audit plan, information requests, action plan submission, monitoring action plan completion, and report finalization
Lead efforts and coordination, as part of process in discussion, analysis, documentation and other paperwork
Participate in meetings with individuals, departments and divisions to update auditees on findings and audit process
...
Audit planning – contribute to the development and execution of annual internal audit plan.
Audit fieldwork – execute audit engagements based on the approved internal audit plan (that will include follow-up audit reviews) as well as any ad hoc audit or investigation reviews (as requested by the Audit and Risk Committee or the Board from time to time); and
Audit reporting – assist on all reporting obligations to the Audit and Risk Committee, the Board or the Group CEO
...
Lead and support audits, assessments and assurance activities for information security and Digital Trust schemes, with focus on ISO/IEC 27001 ISMS and related standards.
Support SGS Malaysia in obtaining, maintaining or expanding accreditation, certification or licensing capability for Digital Trust services.
Validate technical proposals, audit scopes, certification assumptions, man-day calculations, competency requirements and commercial feasibility for new or expanded Digital Trust services.
...
Lead and support audits, assessments and assurance activities for information security and Digital Trust schemes, with focus on ISO/IEC 27001 ISMS and related standards.
Support SGS Malaysia in obtaining, maintaining or expanding accreditation, certification or licensing capability for Digital Trust services.
Validate technical proposals, audit scopes, certification assumptions, man-day calculations, competency requirements and commercial feasibility for new or expanded Digital Trust services.
...
Audit planning – contribute to the development and execution of annual internal audit plan.
Audit fieldwork – execute audit engagements based on the approved internal audit plan (that will include follow-up audit reviews) as well as any ad hoc audit or investigation reviews (as requested by the Audit and Risk Committee or the Board from time to time); and
Audit reporting – assist on all reporting obligations to the Audit and Risk Committee, the Board or the Group CEO
...
Plan, lead, and manage IT audit engagements, including defining scope, risk assessment, and audit program design.
Evaluate IT General Controls (ITGC), Cybersecurity, Enterprise Resource Planning (ERP) systems such as SAP S/4HANA, cloud systems and other digital platforms.
Review IT policies, procedures and controls against recognized standards and good practices, including ISO 27001, ISO 20000 and the National Institute of Standards and Technology (NIST) frameworks.
...