Internal Audit Manager
Why This Role Matters
Finexus Group operates across regulated fintech services — e-money, merchant acquiring, financing, remittance, transactional software, and regulatory reporting. As the Group scales and its control environment grows more complex, Internal Audit needs a manager who can lead audit delivery end-to-end, represent the function credibly with senior stakeholders, partner with the business rather than audit by checklist, and lead the adoption of AI and automation across a lean team.
About the Role
You will lead the planning and execution of risk-based audits across Finexus entities, manage and develop a small team, and act as the primary point of engagement for senior stakeholders and external audit partners, supporting regulatory examinations as needed. This is a hands-on role — you’ll stay close enough to the work to guide quality and judgment calls, while delivering findings the business can actually use: clear, risk-proportionate, and practical, without compromising the objectivity and independence Internal Audit must hold. We’re looking for an auditor who thinks like a business partner, not a checklist follower — someone who understands the business, challenges constructively, and sees AI and automation as core to how modern audit is done.
Mission and Expected Outcomes
- Deliver the annual audit plan on time, with findings that are rigorous, practical, and trusted by senior stakeholders.
- Build a small, well-led team that’s confident handling a growing, multi-entity audit portfolio.
- Make AI, data analytics, and automation a standard part of how audits are delivered — with a growing share of engagements using full-population testing or continuous monitoring rather than sample-based checks alone.
- Make Internal Audit a credible, respected voice at the senior management and Audit Committee level — a business partner management seeks out early, not a function it works around.
Key Responsibilities
- Lead development and execution of risk-based audit plans across assigned entities, in line with regulatory requirements, internal policy, and business priorities.
- Review team output for quality, evidence, and clarity before findings reach senior stakeholders.
- Act as a risk-aware sounding board for business leaders on new products, system and process changes, and market launches — offering an early, informal view on control and regulatory implications, without owning the decision or design, preserving independence to audit that work later.
- Independently assess the design and operating effectiveness of internal controls, risk management, and governance processes, identifying root causes and recommending practical process improvements — not just listing exceptions.
- Coordinate with Compliance and Risk to avoid duplicated effort and close coordination gaps, while keeping audit scope, testing, and conclusions independent.
- Coach and develop team members, manage workload across a small team covering a growing audit universe, and build the team’s AI and automation skills so automation becomes how the whole team works, not one person’s specialism.
- Own the audit portfolio’s in-house vs. outsourced mix, and oversee external providers where audits are co-sourced or outsourced.
- Own Internal Audit’s AI and automation roadmap — identifying high-value use cases, embedding tools into evidence collection, testing, and documentation, and automating routine audit work wherever it adds value.
Audit and Regulatory Scope
- Business scope: regulated fintech products and services, technology platforms, transactional systems, and reporting solutions.
- Audit scope: internal controls, technology controls, risk management, governance, regulatory compliance, and operational processes.
- Regulatory and industry scope: Bank Negara Malaysia (including RMiT and related guidelines), PayNet, ISO 27001/9001, card scheme requirements (Visa), and PDPA — across Finexus’s regulated entities, several run concurrently within a single audit year.
- Approach: independent, objective, risk-based, and evidence-driven, with clear escalation of significant issues to senior management and the Audit Committee.
Qualifications
- Bachelor’s Degree in Accounting, Finance, Information Systems, IT, or a related discipline. Professional certifications (e.g. CIA, CISA, CPA, ACCA, CFE, CAMS, or relevant ISO Auditor certification) are an advantage but not mandatory. The Company supports professional development and certification.
- At least 6 years of relevant experience in internal audit, external audit, IT audit, or risk assurance, including hands-on experience assessing technology-related risks and controls.
- At least 2–3 years of experience leading audit engagements or supervising audit staff.
- Experience in financial services, fintech, or other regulated, technology-driven environments is preferred.
Required Competencies and Skills
- Audit expertise and judgment — independently plans and executes audits, evaluates evidence, identifies control weaknesses, and reaches sound, defensible conclusions.
- Business and risk acumen — understands how businesses operate, where material risks sit, and focuses audits on what matters most. Recommends practical, risk-proportionate solutions rather than checklist-driven compliance.
- Technology and regulatory awareness — understands technology risks, IT general controls, information security, and is familiar with BNM, PayNet, ISO standards, card scheme requirements, and PDPA.
- AI and automation capability — has practical experience applying AI, data analytics, or automation to improve audit testing, analysis, or reporting, and actively identifies opportunities to reduce manual work and strengthen audit effectiveness.
- Communication and stakeholder management — communicates findings clearly, challenges management constructively, and confidently presents and defends conclusions to senior stakeholders.
- People leadership and delivery — leads audit engagements from planning through closure, manages deliverables, and coaches and develops team members.
- Professional independence and integrity — works collaboratively across functions while maintaining objectivity, accountability, and sound judgment on escalation.
Preferred and Good to Have
- Experience auditing payment systems, transactional platforms, or regulatory reporting solutions.
- Experience leading AI or automation initiatives in audit from concept through adoption.
- Experience working in a fast-growing or scaling company.
- Experience presenting findings to an Audit Committee or equivalent governance body.