Total 10 Senior Executive it auditor job vacancies in Malaysia

Job description

Key Responsibilities:

ISMS Management :

- Implement and manage the ISMS to ensure compliance with ISO 27001 or equivalent frameworks.

- Perform risk assessments, vulnerability assessment s, and security audits to identify areas of improvement within the ISMS.

- Establish and maintain the organisation's security policies, procedures, and controls to protect sensitive information and systems .

- Conduct regular reviews and audits of the ISMS to ensure its effectiveness and compliance with industry standards.

Risk Management and Security Controls:

- Identify potential security risks and vulnerabilities in information systems, and define appropriate security measures to mitigate those risk.

- Implement and maintain appropriate security controls to manage risk in areas like data protection, access management, and incident response.

- Assist in the development and execution of business continuity and disaster recovery plans.

CISO Responsibilities:

- Act as a subject matt er expert on information security matters and advise senior management on potential risks, threats, and mitigation strategies.

- Ensure that all information security initiatives are in line with the organisation's objectives and legal / regulatory requirements.

- Collaborate with different departments to ensure consistent and effective information security practices across the organisation.

Compliance and Audits:

- Lead internal and external audits related to ISMS and other security standards.

- Ensure that the organisation complies with information security laws, regulations, and contractual obligations.

- Prepare and present regular reports on ISMS performance to senior management and stakeholders.

Training and Awareness:

- Develop and deliver training programs on information security policies, procedures, and best practices for employees at all levels.

- Promote a culture of security awareness and ensure that the organisation's workforce adheres to security protocols.

Incident Management:

- Coordinate and support incident response effort s, ensuring that security incidents are reported, managed, and mitigated promptly.

- Conduct post-incident reviews and help improve the organisation's security posture based on lessons learned.

Documentation and Reporting:

- Maintain accurate records of risk assessments, audits, incident reports, and corrective actions.

- Generate regular reports to senior management about the performance of the ISMS, risks, and compliance efforts.

Qualifications:

Certification & Education:

- Certified Information Security Officer (CISO) or equivalent certifications such as ISO 27001 Lead Implementer, CISSP, CISM .

- Bachelor's degree in Information Security, Information Technology ,Cybersecurity, Computer Science, or a related field (or equivalent experience)(added advantage).

Experience:

- Proven experience in implementing and managing an ISMS in a corporate environment.

- Hand s-on experience with ISO 27001 or other information security frame works.

- Experience in risk management, compliance, and security audits.

- Experience in handling information security incidents and applying corrective measures.

Skills:

- Strong understanding of information security governance, risk management, and compliance frameworks.

- Ability to assess and mitigate security risks, and implement robust security measures.

- Excellent communication and interpersonal skills for working with stakeholders at all levels.

- Ability to develop, implement , and maintain security policies, procedures, and awareness programs.

Technical Skills (Added Advantage):

While not mandatory, the following technical skills are considered an added advantage and will help in the execution of daily ISMS-related tasks:

Security Tools and Technologies:

- Familiarity with SIEM (Security information and Event Management), vulnerability management tools, firewalls, endpoint protection, and encryption technologies.

- Experience with network security protocols such as fire walls, VPNs, IDS/ IPS, and other protective measures.

Cloud Security:

- Knowledge of securing cloud environments and platforms (e.g., AWS, Azure, Google Cloud).

- Experience in implementing cloud security measures such as identity management, data encryption, and secure access controls.

Identity and Access Management (IAM):

- Experience with IAM solutions and protocols such as multi-factor authentication (MFA), Single Sign-On (SSO), and role-based access control (RBAC).

Automation and Scripting:

- Experience with automation tools or scripting languages (e. g., Python, PowerShell) to stream line security tasks and improve operational efficiency.

Network and Infrastructure Security:

- In-depth knowledge of network security, secure network design, and infrastructure protection.

Incident Response and Forensics:

- Hands-on experience with incident response tool s, forensic analysis, and managing post-incident investigations.

Preferred Qualifications:

- Experience with GDPR, HIPAA, or other privacy and regulatory standards.

- Familiarity with emerging threats such as ransomware, insider threat s, and cloud-native security risks.

- Experience in conducting security awareness training or workshops.

Perks & Benefits

• Nearby public transport
• Medical insurance
• Personal leave
• Paid training and development

Job Purpose

Responsible for ensuring Regulatory and Operational IT functions are in accordance with relevant laws and regulatory guidelines, fostering a strong compliance culture in the Bank’s overall environment and ensuring operations within regulatory compliance.

Job Description

1. IT Compliance Advisory

• Provide advisory services on IT compliance related to regulatory and operational requirements.
• Participate in IT project/ task force as advisor or reference point and serves as a key point of reference for the business unit (BU) and stakeholders in relation to regulatory guidelines.
• Act as liaison officer between bank and regulatory bodies, banking associations, and authorities. Respond to inquiries from internal and external parties to ensure alignment with compliance expectations and deliverables.

1. IT Compliance Reviewer

• Develop annual compliance review plan for the IT domain, encompassing regulatory policy documents, CRR, and upcoming regulatory requirements.
• Conduct an independent IT compliance review to ensure IT adhere to applicable compliance criteria and required standards.
• Follow up on the action plan according to compliance findings in the review activities.

1. Independent IT Compliance Assessor

• Perform an independent assessment on IT and Digital proposal/concept paper signoff prior submission to the Management Committee and BNM submission (where necessary).
• Ensure proposed concept adherence to internal and external policy guideline.

1. Administration

• Ensure the Compliance Risk Control repository is consistently updated.
• Prepare/facilitate internal and external reporting to Management, Board and regulators (where applicable).

Other requirement

Capability in overseeing cybersecurity domain to mitigate technology-related risks will add significant value.

Basic Qualifications

• Bachelor/ Degree in any IT discipline.
• Minimum 3 years of experience in a related field such as Compliance, Audit, Risk Management, or IT is required for this position.
• Relevant Compliance, AML, Audit and Risk-related Certifications and /or any other relevant certification with regard to Compliance from the Asia Institute of Chartered Bankers (AICB) is considered an added advantage.
• Relevant IT certification and Project Management Professional (PMP) from recognized bodies, foundations i.e. ITIL, Prince2, TOGAF is an added advantage.
• Experience in banking operations regulatory compliance, operational compliance, IT or product knowledge is an added advantage.

• Technical competencies
• Demonstrated with regulations/guidelines of Bank Negara Malaysia, Acts, company laws, and compliance framework pertaining to the financial services industry

Perks & Benefits

• Nearby public transport
• Central location
• Casual dress code
• Medical insurance
• Personal development opportunities
• Dental insurance

Responsibilities:

• Execute full software development life cycle (SDLC).
• Create flowcharts, layouts and documentation to identify requirements and solutions.
• Write well-designed, testable code.
• Produce specifications and determine operational feasibility.
• Integrate software components into a fully functional software system.
• Develop software verification plans and quality assurance procedures.
• Document and maintain software functionality.
• Troubleshoot, debug and upgrade existing systems.
• Deploy programs and evaluate user feedback.
• Comply with project plans and industry standards.
• Ensure software is updated with latest features.

Requirements:

• Proven work experience as a Software Engineer or Software Developer.
• Experience designing interactive applications.
• Ability to develop software in Java, Ruby on Rails, C++ or other programming languages.
• Strong knowledge of relational databases, SQL and ORM technologies (JPA2, Hibernate).
• Experience developing web applications using at least one popular web framework (JSF, Wicket, GWT, Spring MVC).
• Familiarity with test-driven development.
• Excel in software engineering tools.
• Ability to document requirements and specifications.
• Possess at least a Bachelor's Degree in Computer Science, Engineering or relevant field.

Perks & Benefits

• Allowance (travel stipends, transportation, etc.)
• Nearby public transport
• Central location
• Casual dress code
• Free snacks / Happy hours

Senior Customer Success Management Executive (IT Industry)

KARUNA (SARAWAK) ENTERPRISE SDN. BHD.

Role Overview:

As a Senior Customer Success Executive at Karuna, you will play a pivotal role in building and

maintaining strong relationships with our clients, ensuring they derive maximum value from our

technology solutions. You will be responsible for driving customer retention, growth, and advocacy by

developing strategic account plans and engaging with key stakeholders within our customer

organizations.

Key Responsibilities:

Relationship Building:

Cultivate and sustain strong relationships with key stakeholders within customer organizations,

including executives, decision-makers, and end users, to ensure long-term satisfaction and partnership.

Strategic Account Management:

Develop and execute strategic account plans tailored to each customer's specific needs and goals, with

an emphasis on driving retention, growth, and advocacy within the tech space.

Onboarding and Training:

Lead the onboarding process for new customers, ensuring a seamless transition by providing in-depth

training on our technology products and services, and enabling customers to achieve their desired

outcomes.

Customer Engagement:

Regularly engage with customers to understand their evolving needs, identify opportunities for upselling

or cross-selling additional tech products or services, and address any concerns or challenges they may

face.

Primary Point of Contact:

Serve as the main point of contact for customer inquiries, concerns, or escalations, collaborating with

internal technical teams to quickly resolve issues and ensure customer satisfaction.

Customer Advocacy: Represent the voice of the customer within our organization, advocating for their

needs and priorities across all departments, and driving initiatives to enhance the overall customer

experience.

Feedback Analysis:

Collect and analyze feedback from customers on their experience with our technology solutions,

identifying trends and areas for improvement, and working with internal teams to drive product

enhancements or process optimizations.

Performance Monitoring:

Track and analyze key performance metrics related to customer success, such as customer

satisfaction scores, retention rates, and upsell/cross-sell opportunities, taking proactive measures to

ensure targets are met or exceeded.

Job Requirements:

Educational Background:

Bachelor’s degree in Business Administration, Marketing, IT or a related field is required.

Experience: Proven experience in a customer-facing role, such as customer success, account

management, or sales within the tech industry, with a strong track record of driving customer satisfaction

and retention.

Skills:

Strong interpersonal and communication skills, with the ability to build rapport, influence, and

collaborate effectively with both customers and internal technical teams.

Strategic Thinking: Demonstrated strategic thinking and problem-solving abilities, with a proactive and

solution-oriented approach to addressing customer needs and challenges.

Adaptability:

Ability to manage multiple priorities in a fast-paced, dynamic tech environment.

Technical Proficiency:

Familiarity with Customer Success software platforms and tools, as well as a solid understanding of

technology solutions and how they deliver value to customers.

Passion for Customer Success:

A deep commitment to customer advocacy and a passion for delivering exceptional customer

Perks & Benefits

• Casual dress code
• Company trips
• Personal leave
• Open culture
• Personal development opportunities
• Staff activities 
• Season Parking
• Panel Doctor

工作目的

負責確保監管和營運IT職能符合相關法律和監管指引，在銀行整體環境中培養強大的合規文化，並確保營運符合監管要求。

職位描述

1. IT合規諮詢

• 提供與監管和營運要求相關的 IT 合規性諮詢服務。
• 作為顧問或參考點參與 IT 專案/工作小組，並作為業務部門 (BU) 和利害關係人在監管指南方面的關鍵參考點。
• 擔任銀行與監管機構、銀行協會和當局之間的聯絡官。回應內部和外部各方的詢問，以確保符合合規期望和可交付成果。

1. IT合規審查員

• 制定 IT 領域的年度合規審查計劃，包括監管政策文件、CRR 和即將到來的監管要求。
• 進行獨立的 IT 合規性審查，以確保 IT 遵守適用的合規性標準和要求的標準。
• 根據審查活動中的合規結果跟進行動計劃。

1. 獨立 IT 合規評估員

• 在提交給管理委員會和國家銀行提交（如有必要）之前，對 IT 和數位提案/概念文件簽署進行獨立評估。
• 確保提出的概念符合內部和外部政策指南。

1. 行政

• 確保合規風險控制儲存庫持續更新。
• 準備/協助向管理階層、董事會和監管機構（如適用）進行內部和外部報告。

其他要求

監督網路安全領域以減輕技術相關風險的能力將增加顯著的價值。

基本資格

• 任何 IT 學科的學士/學位。
• 該職位需要在合規、審計、風險管理或 IT 等相關領域擁有至少 3 年經驗。
• 亞洲特許銀行家協會 (AICB) 頒發的相關合規性、反洗錢、審計和風險相關認證和/或任何其他與合規性相關的認證被視為額外優勢。
• 來自公認機構、基金會（例如 ITIL、Prince2、TOGAF）的相關 IT 認證和專案管理專業人員 (PMP) 是一項額外優勢。
• 具有銀行業務監管合規性、營運合規性、IT 或產品知識的經驗者優先。

• 技術能力
• 展示了馬來西亞國家銀行的法規/指南、法案、公司法以及與金融服務業相關的合規框架

津貼和福利

• 附近的公共交通
• 中心位置
• 休閒著裝要求
• 醫療保險
• 個人發展機會
• 牙科保險

Responsibilities:

1. Oversee and manage the day-to-day IT operations, ensuring all systems and networks are operating efficiently and securely.
2. Able to procure necessary IT related equipment for company needs.
3. Responsible for ERP system (Epicor Kinetic) to provide first line of support.
4. Involve in application design, confirm the system logic, system integration, system interfaces, and system customisations.
5. Provide daily technical support for desktops, laptops, printers, servers, and network issues.
6. Perform general IT administrative tasks, including managing the fixed asset register, documentation, and guidelines.
7. Offer timely end-user support, diligently troubleshooting and resolving IT-related issues while keeping the helpdesk ticketing system updated with accurate information.
8. Execute any additional tasks and responsibilities that may be assigned periodically by senior management.

Position Requirements:

• Degree in Computer Science or similar field.
• At least 3 years of ERP (Epicor Kinetic) implementation experience either from an end-user or vendor background.
• Good understanding of ERP functionalities.
• Good planning and coordination skills.
• Strong writing, verbal communication, and presentation skills.
• Good interpersonal skill and with proven ability in troubleshooting and problem solving.
• Able to work travel when is required. 
• Fluency in both written and spoken English and Bahasa Malaysia.

Benefits:

• Allowance provided
• Permanent position with salary increment after confirmation
• Annual salary and performance-based bonuses
• 5 working days (Monday to Friday)
• On-site parking
• Air-conditioned work environment
• Access to panel clinics
• Medical and dental claims
• Hospitalization and surgery insurance
• Personal accident insurance

Job Responsibilities :

• Plan and conduct IT audits in accordance with the approved annual audit plan.
• Assist to develop audit program and prepare audit work documentation as guided by the Internal Audit’s documentation standard to support audit conclusion and results.
• Prepare and discuss audit findings with relevant departments and develop practical, value added recommendations to address the root cause of the issues identified.
• Monitor and follow-up to ensure agreed improvement plans are timely implemented.
• Involvement in the Company’s J-SOX assessment process and other ad-hoc projects as and when required.

Requirements :

• Degree or relevant professional qualification in Information Technology, Computer Science or Information System Auditing / Security.
• A minimum of 4 years of IT audit / IT security experience.
• Good organisational and analytical skills, and possess strong sense of ownership to complete assigned tasks, audits within the stipulated timeframe.
• Good command of English with good report writing and communication skills.
• A good team player with high level of integrity, initiatives, and good interpersonal skills.

Perks & Benefits

• Nearby public transport
• Flexible working hours
• Casual dress code
• Medical insurance
• Personal leave

職責：

1. 監督和管理日常 IT 運營，確保所有系統和網路有效率、安全地運作。
2. 能夠根據公司需求採購必要的IT相關設備。
3. 負責ERP系統（Epicor Kinetic）提供第一線支援。
4. 參與應用程式設計，確認系統邏輯、系統整合、系統介面和系統客製化。
5. 為桌上型電腦、筆記型電腦、印表機、伺服器和網路問題提供日常技術支援。
6. 執行一般 IT 管理任務，包括管理固定資產登記冊、文件和指南。
7. 提供及時的最終用戶支持，認真排除故障並解決 IT 相關問題，同時保持幫助台票務系統更新準確資訊。
8. 執行高階管理層可能定期分配的任何其他任務和職責。

職位要求：

• 計算機科學或類似領域的學位。
• 擁有至少 3 年最終使用者或供應商背景的 ERP (Epicor Kinetic) 實施經驗。
• 對ERP功能有很好的了解。
• 良好的計劃和協調能力。
• 較強的寫作、口語溝通和表達能力。
• 良好的人際溝通能力以及經過驗證的故障排除和解決問題的能力。
• 需要時能夠出差工作。
• 流利的英語和馬來語書面和口語能力。

好處：

• 提供津貼
• 永久職位，確認後加薪
• 年薪和績效獎金
• 5個工作天（週一至週五）
• 現場停車
• 空調工作環境
• 進入指定診所
• 醫療和牙科索賠
• 住院及手術保險
• 人身意外傷害保險

職責：

• 執行完整的軟體開發生命週期（SDLC）。
• 建立流程圖、佈局和文件來確定需求和解決方案。
• 編寫設計良好、可測試的程式碼。
• 制定規格並確定操作可行性。
• 將軟體組件整合到功能齊全的軟體系統中。
• 制定軟體驗證計劃和品質保證程序。
• 記錄和維護軟體功能。
• 對現有系統進行故障排除、調試和升級。
• 部署程序並評估使用者回饋。
• 遵守專案計劃和行業標準。
• 確保軟體更新為最新功能。

要求：

• 作為軟體工程師或軟體開發人員擁有經過驗證的工作經驗。
• 擁有設計互動式應用程式的經驗。
• 能夠使用 Java、Ruby on Rails、C++ 或其他程式語言開發軟體。
• 對關聯式資料庫、SQL 和 ORM 技術（JPA2、Hibernate）有豐富的了解。
• 具有使用至少一種流行的 Web 框架（JSF、Wicket、GWT、Spring MVC）開發 Web 應用程式的經驗。
• 熟悉測試驅動開發。
• 擅長軟體工程工具。
• 能夠記錄需求和規格。
• 至少擁有計算機科學、工程或相關領域的學士學位。

津貼和福利

• 津貼（旅費、交通費等）
• 附近的公共交通
• 中心位置
• 休閒著裝要求
• 免費小吃/歡樂時光

工作範圍和職責

•為所有部門提供IT支持

•安裝/配置電腦硬體、軟體及其他與 IT/ICT 相關的內容

•為內部應用程式建立使用者指南

•調查、診斷和解決電腦軟體和硬體故障

•支援和維護所有電信

•更新和維護 IT/ICT 文件和資產

•設計卡片、海報、廣告、編輯影片和其他與設計或編輯相關的內容

•不時給予的其他相關任務

職位要求

•具備應用MS Office的技能與知識

•擁有網路故障排除和 IT 支援的技能和知識

•具備 Adode Photoshop/Illustrator/Canva 的技能和知識

•具備編輯影片和圖形的技能

•擁有有效駕駛執照並優先擁有 B2 駕照

•優先考慮立即可用/立即攝取的人員

津貼和福利

• 員工股權
• 附近的公共交通
• 休閒著裝要求
• 醫療保險
• 休假
• 個人發展機會
• 有薪培訓和發展