Job PurposeResponsible for assisting the Strategic & Technology Audit Department Head in preparing and implementing the Function's Technology audit plan approved by the Board Audit Committee (BAC) related to IT Project Audit and IT Advisory.Responsible for performing and supervising the IT Project Audit and Advisory team in conducting audits, and special audit reviews/ ad hoc assignments related to IT governance, risk, and controls.Responsible for delivering timely submissions and good-quality reports.Responsible for preparing and implementing the overall IAD strategic audit plan approved by Management and the Board.To manage and execute the IT audit plan and ad-hoc assignments as instructed by the superior(s).To perform and supervise timely and effective IT audit assignments as instructed by the superior/ CIA in accordance with approved internal and external guidelines, manuals, and standards.To prepare and review the accuracy, comprehensiveness, and quality of audit assignments and as IT advisor to ensure its timely submission.To identify the root cause(s) and to propose the relevant recommendation(s) to mitigate or address the issues/ findings.Engage with the auditee on the audit conducted via exit meeting and closeout (where applicable) and highlight the recommendations to the management/ BAC on the issues raised.Engage with auditee or other relevant staff/ departments as a business partner in promoting good IT governance, improving compliance culture, IT risk management awareness, etc.To review compliance with Environmental, Social, and Governance (ESG).Overall responsible for leadership and management of IT Project Audit & Advisory Section.Assist the superior and CIA in preparing the Annual Audit Plan in accordance with the IT risk-based audit planning and universal audit concept as well as strategies to be implemented for the financial year.Responsible for ensuring completeness and comprehensiveness of all IT audit assignment reports for submission and presentation to the relevant management committee and Board Audit Committee (BAC).Plan the audit engagement including its scopes and objectives as well as timely pre-audit planning, identify the reasonable period, and ensure audit engagements are completed within the budgeted timeline.Oversee the implementation of the audit plan to ensure that the IT audit plan is executed effectively which includes special review, and ad-hoc assignments. (where applicable).Ensure facts, findings, and recommendations to rectify IT environment operational / control weaknesses are accurate, specific, and practical.Track the status of audit assignments and review the working papers prepared by the team to ensure proper documentation and work done.Represent and participate in key IT project implementation and policy review on a consultative basis; attend and effectively participate in any meeting and discussion on behalf of the department.Identify, plan, and monitor the manpower needs of the section. Allocate resources to optimize time and output.Plan and oversee the training and development needs of the team and to provide on-the-job training, guidance, and coaching to improve their knowledge and skills as well as to develop the talent pool within the section.Provide the advisory role by attending the Bank's IT Project Steering Committee as one of the governance representatives (where applicable).Provide advisory/ input/ consultancy to superior, CIA, Management, and Board in the decision-making process.To perform special audit reviews/ other ad-hoc assignments as requested by the superior/CIA.QualificationsEducation:Bachelor's Degree in IT, Banking, Accountancy, Business Administration, Islamic Studies or equivalent.Having certified professional qualifications such as Certified Information System Auditor (CISA), Certified Information Security Manager (CISM), Certified Internal Auditor (CIA), or Certificate in Internal Auditing for Financial Institutions (CIAFIN), would be advantageous.Experience:10 to 12 years of related experience preferably in auditing, information technology, and Islamic financing operations. Minimum 5 years in managing/supervising IT audit function.Possessing good knowledge IT of banking operations and IT risk management aspects would be advantageous.Skills & Competencies:Knowledge of Information Technology auditing, risk management, management, and corporate governance concepts, relevant regulatory guidelines mainly on BNM/GPs, internal IT audits standards & practices, and Islamic Banking would be an added advantage.Ability to gather, analyze, and evaluate facts and to prepare and present concise oral and written reports.Ability to maintain current knowledge of developments related to business matters of interest to internal audit and new auditing techniques and practices.Good communication and interpersonal skills with high proficiency in verbal and written English & Bahasa Melayu.Good work attitude, flexible, able to work independently, and willing to take on challenges.#JPKR#JPKR
