Tune Protect Group Hiring! Full Time Internal Audit (Operational and IT) in Federal Territory - Ricebowl

This person is responsible for leading risk-based operational and IT audits across the Group, providing independent assurance on governance, risk management, internal controls and compliance. The role oversees audit engagements from planning to reporting, identifies key risks and control gaps, and supports continuous improvement through technology-enabled auditing and team leadership.

JOB RESPONSIBILITIES:

Operational Audit Management

• Lead and manage risk-based audit engagements in accordance with the approved annual audit plan, including operational, regulatory, financial, ad-hoc and investigative reviews.
• Assess the adequacy and effectiveness of governance, risk management, internal controls and compliance with applicable legal, regulatory and internal requirements.
• Oversee the end-to-end audit lifecycle, including planning, fieldwork, reporting and follow-up activities to ensure timely and quality audit delivery
• Prepare audit documentation, including inherent risk documentation, engagement letter, audit program steps, working papers, findings and reports, ensuring adherence to Internal Audit standards and methodology.
• Monitor the implementation of agreed corrective actions and report on the status of audit issues to Management and relevant governance committees.
• Provide leadership, coaching and technical guidance to audit team members, supporting capability development and knowledge sharing.
• Ensure compliance with the Internal Audit Charter, Audit Manual, departmental procedures and professional auditing standards.
Support the development and execution of the annual risk-based audit plan and undertake special reviews, investigations and other assignments as directed by the Group Head Internal Audit.

Technology and IT Audit

• Lead IT audit engagements covering IT governance, IT General Controls (ITGC), cybersecurity, infrastructure, cloud environments, applications and data management.
• Assess the effectiveness of information security, access management, change management, system development lifecycle, disaster recovery and business continuity controls.
• Evaluate compliance with technology-related regulatory requirements and industry standards, including Bank Negara Malaysia's Risk Management in Technology (RMiT) framework.
• Review major technology initiatives, system implementations and digital transformation programmes to identify emerging risks and control gaps.
• Leverage data analytics and continuous auditing techniques to enhance audit coverage, identify risk indicators and improve audit effectiveness.

JOB REQUIREMENTS:

• Candidate must possess at least Diploma/bachelor’s degree/Professional Degree in related fields (i.e. IT, Commerce etc.).
• Years of Experience: More than 7 years working experience in the Internal / External Audit field in IT Audit operation. Having experience of performing Operational Audit is highly recommended.
• Knowledge of risk management, corporate governance and internal audit practices.
• Knowledge of all relevant Acts, regulations and guidelines related to General Insurance, BNM, LFSA, Bursa, etc.
• High standard of computer literacy (i.e. Excel, Word, Power Point etc.).
• Strong analytical skills with aptitude for details and internal controls.
• Good leadership skills with integrity and commitment to high ethical and professional standards. In this aspect, well versed with the Standards for the Professional Practice of Internal Auditing.
• Possess good interpersonal, communication, negotiation and report writing skills.
• Ability to interact with Management at all levels.
• Ability to work under tight deadlines and withstand work pressure. In this aspect, able to work evenings and weekends, as required.
• Ability to work effectively, both independently and in teams.
• Possess own transport (where necessary) and willing to travel nationwide for audit purposes.