Key Responsibilities Audit Execution •Support the audit planning, fieldwork, reporting, and follow-up or audit observation tracking for information technology ('IT') or information system (IS) audit work assigned in an efficient and effective manner such that audit work meets budget, quality standards, and timeliness outlined in the internal audit methodology.
Special Investigation and Project or Task Execution •Support any special investigation, projects, or other tasks assigned by the Head of Department (HOD), as and when required.
Communication and Reporting •Support the Internal Audit (IA) team in ensuring timely and effective communication of overall audit opinion, audit observations, and root causes to all relevant stakeholders.
•Monitor and escalate audit observations and action plans that are not meeting the target date of completion, including the potential overdue cases.
•Supporting the HOD in the presentation of Internal Audit reports to the Board Audit Committee and Senior Leadership Committee and highlighting any key concerns on a timely basis.
Audit Strategy •Develop the department's strategic plan, as well as departmental and key performance indicators (KPIs) to support KWAP's business objectives and risk appetite.
•Ensure that the formulation of comprehensive internal audit methodology aligns with internal audit best practices to ensure the effective execution of internal audit activities such as risk assessment, audit planning, fieldwork, reporting, and follow-up processes.
Risk-based Annual Audit Plan •Participate in annual risk assessment exercise for the development of an annual risk-based audit plan to ensure adequate audit coverage on a yearly basis.
Internal Audit Management •Supporting the assigned IA Manager to ensure correct capacity audit planning so that the audit team can fulfill the scope of an audit assignment effectively and efficiently.
Stakeholders Management •Embrace the role of a trusted partner within KWAP by maintaining good rapport with all stakeholders to support KWAP in achieving its objectives.
Build an effective engagement and good relationship with external stakeholders, such as Jabatan Audit Negara, appointed external auditor and IA practitioners from the industry to keep abreast and comply with the latest development of the Institute of Internal Auditors (IIA) Standards as well as law and regulations in relation to governance, risk management, and control processes
Governance, risk and control (GRC) •Promote the understanding of good governance, risk management, and controls in Information Technology (IT) and Information Systems (IS) related areas within KWAP.
Professional and Business Ethics •Display exemplary conduct and live by the KWAP's values, code of ethics, and conduct.
•Embrace the highest standards of ethics and compliance with relevant policies, processes, and regulations.
Audit Data Analytic •Contribute to the implementation of data analytics in the assigned audit tasks.
Key Requirements•Minimum Bachelor's Degree in Computer Science, Management Information Systems, or any related field.
•Professional certifications in auditing will be an added advantage.
•Minimum 3 years of experience in IT or IS auditing.
•Ability to objectively analyse and apply information by 'thinking out of the box where necessary' to support the planning, fieldwork, and reporting of results of the internal audit engagement.
•Good knowledge in corporate governance, risk, management, and control.
•Familiar with cloud computing, cyber security risk and system development methodology.
•Good communication, interpersonal, and people management skills.
•Self-motivated achiever with the ability to multi-task and work with minimal supervision.
•Highly driven, resourceful, adaptable to change, and able to manage internal and external stakeholders.
•Confident and courageous in raising audit observations in a professional manner.