Kerja Sepenuh Masa, Executive-Specialist - Risk and Compliance di Scicom (MSC) Berhad Federal Territory - Maukerja

The Responsibilities of the Role: -

• Conduct ISO internal audits, including Information Security Management System (ISO 27001), Quality Management System (ISO 9001), and other ad-hoc audits, including audit planning, execution, documentation of audit work performed, reporting, and communication of audit findings.
• Plan, execute, and finalise ISMS, QMS and ad-hoc follow-up audits, ensuring all non-conformities, observations, and corrective actions are properly tracked, validated, and closed.
• Review and track draft QMS documentation submitted by Operations and Shared Services, providing constructive feedback to support continuous improvement, strengthen adequacy of processes and controls, and ensure alignment with internal requirements and compliance standards.
• Maintain and update Scicom Anti-Bribery and Anti-Corruption Risk Registers, ensuring completeness, accuracy, and timely updates in line with governance requirements.
• Maintain and update or review Scicom Anti-Bribery and Anti-Corruption Risk Registers, ensuring completeness, accuracy, and timely updates in line with regulatory requirements.
• Maintain and update records relating to inbound gifts, hospitality, and entertainment declaration in accordance with ABAC policies.
• Maintain and update departmental ISMS/QMS documents, including Access Control Lists (ACL), Risk Treatment Plans (RTP), and Record Retention Schedule (RRS), ensuring timely revisions following reviews or as required.
• Prepare, update and maintain departmental trackers for all Process Implementation Approval Forms (PIAF) and Document Change Requests (DCR), ensuring proper monitoring, status tracking, and closure including the SES document management.
• Maintain and update the Scicom Senior Management Team organisation chart to ensure accuracy and alignment with current reporting structures including the SES document management.
• Maintain and update the ISO Representative trackers, ensuring accurate monitoring of appointments, responsibilities, and compliance-related records and manage the SES access control management of ISO representatives.
• Maintain and update departmental QMS documentation to ensure consistency, relevance, and compliance with internal and external requirements, including Board and Board Committee requirements.
• Act as a representative of the RC department in OSHA and Sustainability Committee meetings, ensuring alignment with regulatory, compliance, and organisational requirements.
• Coordinate, prepare and deliver presentations and workshops to employees within Scicom Group and management on compliance and risk management activities.
• Support the Manager - RC in the administration and management of Quality Management System related matters including SES document management.
• Support Operations teams in managing the end-to-end external certification processes (ISO, ISMS, SCP, etc.) including coordination, documentation support, and audit readiness activities where required.
• Perform any other special assignments, ad-hoc tasks as may be required to support the operation of RC function and overall governance requirements.

The Requirements for the Role: -

Qualification & Skills Requirements:

• Bachelor’s degree or professional qualification (CISA, CIA, ACCA, MIA, CPA and/or other IT audit related professional qualification).
• Knowledge and experience in internal auditing for ISO 27001 Information Security Management System and ISO 9001 Quality Management System is mandatory.
• Knowledge and experience in investigative audit, IT audit and/or enterprise risk management framework will be an added advantage.
• Knowledge of internal control processes, corporate governance, regulatory requirements and risk management.
• A team player with strong work ethics, high level of professional integrity, maturity, independence and excellent analytical skills.
• Proficiency in Microsoft Office, Microsoft Excel, Microsoft Visio & PowerPoint.
• Ability to manage multiple tasks, meet deadlines, and work independently with minimal supervision.
• Good communication skills, report writing, analytical & interpersonal skills.

Work Experience:

• Minimum 2 years of experience in IT audit, internal audit, risk or compliance related roles.
• Ability to work out-of-office hours and travel as may be required from time to time.

The Package: -

• Attractive Basic Salary.
• Performance Related Allowance.
• Annual Leave 15 days.
• Medical Leave 14 days.
• Medical and hospitalization coverage.