Senior Manager | Digital Technology Audit

JOB DESCRIPTION

Work assigned is not limited to the job scope listed below:

• Report to the Head of Section / Head of Department.
• Assist Head of Section to develop audit strategies and planning activities, focusing on emerging technologies and mitigating security threats, artificial intelligence, robotic process automation, and data analytics.
• Responsible to develop audit programs and perform IT security control audits / process reviews.
• Act as Team Lead to ensure audit executions are meeting timeline and desired outcome.
• Coach the audit team via regular catch-up and coaching sessions.
• Perform an audit review to validate and assess the adequacy of the system-related security configuration and process controls for core and non-core business applications including areas of application security, operating system security, database security, network security, cloud security, mobile application, third party service provider and exposure to cyber security threats.
• Identify risk solutions to prevent loss of data, enhanced the data protection mechanisms and controls throughout the organization.
• Participate in project management activities in an advisory role, taking into account the agile development methodology approach and staying abreast of the latest/relevant cyber security threats and technology development.
• Review disaster recovery plan activities and conduct regulatory audits.
• Review audit working papers to ensure executions are meeting the necessary audit standards.
• Generate an audit report and summary of audit findings for presentation to Management / Head of Section / Head of Department, drawing attention to areas of particular concern, weakness or improvement points and making recommendations for further actions to address any observations.
• Improve the efficiency and effectiveness of the digital technology audit process and reporting.
• Other ad-hoc duties as requested from time to time.

JOB REQUIREMENTS

• Malaysian citizen.
• Pass the Malay Language including an oral test at the Sijil Pelajaran Malaysia (SPM) level or an equivalent qualification as recognized by the Government.
• Bachelors Degree recognized by the Government from any local or overseas higher learning institutions or an equivalent Professional Qualifications in Information Technology, Computer Engineering, Information Security, Network Security, Cyber Security or fields related thereto. Those with relevant professional qualifications or certifications (CISA, CISSP, CISM, MCSE, CCENT, CCNA, LA ISO27001:2005) will have an added advantage.
• At least 10 years of working experience in areas of IT security, IT audit, IT operation, IT risk management and IT consulting.
• Good knowledge in cyber security, network security, database security, cloud security, Virtual Machine, AS400, Windows security, UNIX security, artificial intelligence tools and IT governance framework. Knowledge in computer-assisted audit techniques (i.e. ACL) will be an added advantage.
• High integrity with strong analytical, result-oriented, process-driven, self-starter with the ability to multi-task and work both independently and as a team member.
• Good interpersonal skills, able to work in a diverse environment and build good working relationships with business partners.
• Establish and maintain effective working relationships with fellow team members and stakeholders.
• Ability to establish priorities, work independently, and proceed with objectives with minimal supervision.
• Excellent report-writing, communication and presentation skills in both Malay and English language.

PLACEMENT

Digital Technology Audit Section, Internal Audit Department.

JOB STATUS

Permanent

All applications are strictly CONFIDENTIAL and only shortlisted candidates will be called in for interviews. Applications are deemed UNSUCCESSFUL if there is no feedback from the EPF 2 MONTHS after the closing date of the advertisement.