Regional IT Auditor (GRC)
Summary
IT auditor conducting pre-audit and certification assessments (PCI DSS, PCI CPP, SWIFT CSP, VAPT, ISO 27001) for payment-industry clients: planning and executing audits, drafting issues and reports, and driving governance/regulatory compliance. Based in Kuala Lumpur with frequent overseas travel; RM 6,000-9,000/month.
Salary: RM 6,000 – RM 9,000 per month
About the role
We are seeking an experienced IT Auditor to strengthen our clienteles' technology governance, risk and regulatory compliance framework. This role requires you to travel overseas frequently to conduct security assessments. The successful candidate will play a key role in driving governance improvements and maintaining alignment with regulatory requirements set by the Payment Cards Industry Security Standards Council (formed by MasterCard, Visa, Amex, JCB & Discover).
Key responsibilities
Conduct internal and external pre-audit assessments and attestation-based / certification audits across various PCI programs involving payment systems, card vendors environment, and IT infrastructure
Take responsibility for planning and executing audits, including drafting of audit issues and audit reports
Ensure that assigned audit work is executed in an efficient and effective manner, clearly documented, within the given budget and timeline, and in line with Audit methodology standards
Drive responses to regulatory reviews, external audits and industry compliance requirements, including PCI CPP, PCI DSS, SWIFT and VAPT related assessments
Promote secure and compliant data management practices across business and technology functions
Support continuous enhancement of the organisation's technology governance framework and undertake other strategic initiatives as required
Support and deliver CSA Cyber Essentials Mark, and Cyber Trust Mark readiness and implementation engagements
Undergo industrial professional certifications to be a certified auditor in the training roadmap
About you
Bachelor's degree in Information Technology or a related technical field with at least 3 years of related working experience
Certified CISA, CISM, ISMS, GSNA, ISO 27001, ACCA, CIMA or IIA(CIA) is highly preferred
Advanced analytical skills to interpret technical data, identify patterns, and draw evidence-based conclusions
Strong written and verbal English and Mandarin communication skills to document and present audit findings effectively
Frequent overseas travelling is required for audit assignments
Required to sign a training bond for the external industry-related courses, certifications and industrial training provided
About us
Founded in 2004, AGES possesses extensive experience collaborating with prominent payment brands such as MasterCard International, Visa International, American Express Company, and UnionPay International on compliance assessments. We offer comprehensive audit services, including Payment Card Industry (PCI) Card Production and Provisioning (CP), PCI Data Security Scheme (DSS), PCI 3D Secure (3DS), PCI P2PE / Token Service Provider (TSP), SWIFT Customer Security Program (CSP), ISO security programs, and other relevant standards.