Job Description

Executive, IT Audit

OVERVIEW:

• Location: Sepang, Selangor
• Department: Group Internal Audit
• Entity: AirAsia Group Berhad
• Status (Full time/part time/contract): Full time

YOUR ROLE AS AN EXECUTIVE, IT AUDIT:

As an Executive, IT Audit within Group Internal Audit, you will assess technology risks and evaluate the effectiveness of controls across the Group’s systems, infrastructure and IT operations. You will support risk-based audit assignments, identify control gaps and recommend practical improvements to strengthen information security, operational resilience and IT governance. Your work will provide independent assurance over the technology supporting the Group’s business operations.

WHAT YOU’LL CHAMPION:

• Support the planning and execution of risk-based IT audits across the Group’s entities and business operations.
• Assess IT general controls, including user access management, change management and IT operations.
• Evaluate application controls supporting transaction processing, data integrity and key business processes.
• Review controls over cybersecurity, infrastructure, cloud services and third-party technology arrangements.
• Assess system development, implementation and project governance controls, including testing and migration arrangements.
• Review backup, disaster recovery and business continuity controls supporting critical systems.
• Use data analytics to identify exceptions, test controls and strengthen audit coverage.
• Prepare clear audit workpapers and evidence-based findings that explain control deficiencies, risks and practical recommendations.
• Engage stakeholders to validate findings and follow up on agreed actions to assess whether deficiencies have been adequately addressed.

WHO YOU ARE:

• Hold a bachelor’s degree in Information Technology, Information Systems, Computer Science, Cybersecurity or a related discipline.
• Have a sound understanding of IT controls, technology risks and information security principles.
• Have relevant experience in IT audit, IT risk, cybersecurity or technology operations; familiarity with audit procedures and evidence gathering is an advantage.
• Understand IT governance and control frameworks such as COBIT, ISO/IEC 27001 and ITIL.
• Demonstrate analytical thinking, professional
  and sound judgement when assessing risks and control effectiveness.
• Communicate technical issues clearly to both technical and non-technical stakeholders, with strong report-writing and documentation skills.
• Be comfortable using spreadsheets, SQL or other data analysis tools to support audit testing and investigation.
• Manage competing priorities, maintain accurate workpapers and deliver assignments within agreed timelines.
• Demonstrate integrity, objectivity and discretion when handling sensitive information; CISA, CRISC, CISSP, CISM, or relevant certifications are an advantage.

WHERE YOU’LL GO:

Build your career in IT audit through exposure to the Group’s technology environment, business operations and evolving digital risks.

Based on your performance, contribution and readiness, you may progress to Senior Executive, IT Audit, taking greater responsibility for audit planning, leading assignments, engaging stakeholders and supporting the development of junior team members.