Kerja Sepenuh Masa, Information Technology Audit Manager di Qi Group Selangor - Maukerja

The IT Audit Manager will be responsible for evaluating and improving the effectiveness of IT controls, security, and governance processes within the organization. This role involves conducting IT audits, ensuring compliance with IT policies, identifying vulnerabilities, and providing recommendations to enhance cybersecurity and operational efficiency. The individual will play a key role in assessing risks related to IT infrastructure, applications, and data security.

Responsibilities & Accountabilities

IT Audit Planning & Execution:

• Develop and execute IT audit plans based on risk assessments.
• Conduct audits of IT systems, applications, networks, security controls, applications, databases, cloud environment, system development and IT Operations
• Evaluate IT governance frameworks, cybersecurity measures, and data protection policies.
• Review application controls, system interfaces, data integrity and automated business processes.
• Standard knowledge on AI assurance and policy framework.
• Identify weaknesses in IT controls and recommend process improvements.

Risk Assessment & Compliance:

• Identify IT risks and vulnerabilities related to cybersecurity, data integrity, and access management.
• Ensure compliance with IT policies, regulatory requirements, and industry best practices.
• Assess IT disaster recovery and business continuity plans for effectiveness.
• Monitor adherence to data protection laws such as GDPR and other relevant regulations.

Cybersecurity & Fraud Prevention:

• Assess the effectiveness of cybersecurity frameworks and suggest enhancements.
• Investigate potential IT security breaches and recommend corrective actions.
• Develop and implement fraud detection mechanisms within IT systems.
• Conduct penetration testing and vulnerability assessments.

Reporting & Advisory:

• Prepare audit reports highlighting IT risks, findings, and recommendations.
• Present audit results to senior management and track corrective actions.
• Provide advisory support to IT and business units on improving security and compliance.

Process Improvement & Leadership:

• Identify opportunities to optimize IT operations and enhance security frameworks.
• Work closely with IT teams to implement effective control measures.
• Stay updated with evolving cyber threats, IT regulations, and emerging technologies.
• Lead and mentor IT audit team members, fostering a culture of continuous improvement.

Requirements:

• Bachelor’s degree in Information Technology, Computer Science, Accounting, or a related field.
• Professional certifications such as CISA, CISSP, CISM, or CRISC preferred.
• Minimum of 6-10 years of IT audit experience, preferably in a direct selling, FMCG, or retail environment.
• Strong knowledge of IT general controls and application controls; cybersecurity and information security; IT governance and technology risk management; system development and change management; business continuity and disaster recovery; and relevant standards and frameworks, including COBIT, ISO/IEC 27001, NIST and ITIL.
• Experience with IT audit tools, data analytics, and penetration testing methodologies.
• Strong analytical, problem-solving and report-writing skills.
• Proficiency in Microsoft Office Suite, IT audit tools, and security software.
• High ethical standards and professional integrity.
• Ability to work independently and manage multiple IT audit assignments.
• Strong attention to detail and organizational skills.

Expectations:

• Maintain confidentiality and objectivity in all IT audit activities.
• Demonstrate initiative and accountability in identifying and mitigating IT risks.
• Collaborate with IT, security, and business teams to enhance risk awareness.
• Be willing to travel for IT audit engagements, as required.

Join us to lead the IT audit function and ensure robust cybersecurity, compliance, and governance.