int(13467)
Kuala Lumpur, Malaysia

Director, Technology Risk Assurance (IT Audit)

Our client, a leading international professional services firm, is hiring a Director / Senior Manager to lead IT audit and technology risk assurance engagements in Kuala Lumpur. The role is a dedicated IT audit position: someone who can assure ITGCs, ERP and automated controls, and understand how those controls support the financial statements.

Our Client Offers

  • A path to Partner through a defined Technology Risk Assurance track
  • Leadership of a growing practice with a diverse client portfolio
  • Regional and global mobility programmes
  • Competitive remuneration and benefits

Please contact Vishalane by emailing your CV directly to vishalane@theedgepartnership.com

Please note that due to the high number of applications only shortlisted candidates will be contacted. If you do not hear from us in the next 5 business days, we regret to inform you that your application for this position was unsuccessful.

By submitting your application, you acknowledge that your personal information may be processed using secure recruitment technologies, including AI-assisted tools, for recruitment, assessment, interview documentation, candidate representation, and related business purposes. Further information is available in our Privacy Policy.

Apply for this Job

Key responsibilities

  • Lead IT audit engagements for listed and private clients, covering ITGCs, automated and application controls, and financial systems risk.
  • Assess ERP and core system environments (e.g. SAP, Oracle, payment systems) and conclude on reliance on IT controls for the financial statement audit.
  • Plan and oversee SOX / ICFR and SORMIC-type control testing and review the quality of workpapers and conclusions.
  • Deliver SOC 1 / SOC 2 / ISAE 3402 reporting, IT governance and cybersecurity reviews, and regulatory reviews such as BNM RMiT for financial-sector clients.
  • Build and apply data and analytics procedures to test full populations and present results to stakeholders.
  • Coach and supervise engagement teams, manage resourcing and allocations and resolve conflicts across teams.
  • Report findings and risk ratings directly to Partners and client senior management, including audit committees.
  • Support audit quality reviews and regulatory inspections of engagement files.
  • Contribute to business development, proposals and growth of the Technology Risk Assurance practice.

Role requirements

  • Degree in Information Systems or a related field
  • CISA certification is highly preferred
  • 10+ years in IT audit or technology risk, ideally at a leading international or large mid-tier audit firm.
  • Proven record leading engagements and teams of up to 10 members, with Manager-level or above experience.
  • Strong knowledge of IFRS and ICFR / SOX, and of ITGC and ERP control frameworks (COBIT, ISO 27001, NIST).
  • Experience across several industries, such as manufacturing, financial services, payments, power and utilities or software.
  • Additional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor.