Associate Director/Director, IT Audit - Kuala Lumpur, Malaysia - Crowe Malaysia PLT

    Default job background
    Description

    Responsibilities:

    • To expand the IT Audit clientele via business development and drive business growth via introduction of new service lines, etc.
    • Prepare proposals for clients after understanding their requirements and presenting the same to Management/Audit Committee/Board if required.
    • Ensure clients are billed accurately and timely on a monthly basis.
    • Lead and participate in IT audits using the COBIT framework including audit planning, fieldwork, reporting and follow-up.
    • Oversee the IT Audit Engagements by performing quality reviews to ensure that the IT Audit Objectives are met satisfactorily.
    • Provide on-going coaching and direction to a team of IT Auditors to ensure that audits are performed in accordance with department and professional standards.
    • Maintain a strong knowledge of IT issues affecting businesses to assess the efficiency and effectiveness of the client's IT general and application controls.
    • Provide consultancy or advisory services to clients, if required to strengthen their IT general and application controls.
    • Presentation of reports to the Audit Committee/ Board of Directors.

    Requirements:

    • Possess Bachelor's/ Masters' Degree in Computer Science or related IT fields.
    • Possess professional IT qualifications, e.g. Certified Information System Auditor (CISA), Certified Risk and Information Systems Control (CRISC), etc.
    • At least 10 years of working experience for Associate Director and 13 years for Director respectively in a similar role in an advisory or consulting firm.
    • Experienced candidate is expected to be familiar with COBIT, NIST, BNM RMiT, PayNet, SC Cybersecurity framework and requirements.
    • Demonstrated experience managing audits within a complex operational and regulatory environment.
    • Demonstrated ability to plan and execute IT audits focusing on IT General Controls, including Access Security, Computer Operations, Change Management, Third Party Management, Business Continuity, Cybersecurity and Application Controls.
    • Extensive information security and network control audit knowledge, and experience with network footprinting and penetration testing tools would be highly regarded.
    • Strong networking skills and possess a high degree of business acumen to drive business growth.
    • Experience in managing a staff of diverse professionals.
    • Must possess strong interpersonal and written communication skills.
    • Able to work independently as well as on a team in a fast-paced, deadline-driven environment.