Tech Governance, Audit & Compliance Lead
Full-time
Senior Executive
Kuala Lumpur, WP Kuala Lumpur
17 hours ago
The Tech Governance, Audit & Compliance Lead will be responsible for developing, implementing, and overseeing the technology governance framework ..
The Tech Governance, Audit & Compliance Lead will be responsible for developing, implementing, and overseeing the technology governance framework to ensure that IT operations align with industry best practices, internal policies, and regulatory requirements. This role will also oversee audit activities, risk management processes, stakeholder engagement, and the continuous improvement of technology governance strategies. The successful candidate will work closely with IT teams, internal auditors, and external stakeholders to track and resolve audit findings, mitigate risks, and ensure compliance.
Key Responsibilities:
- Develop and Implement Technology Governance Framework:
- Leads or commissions the preparation and implementation of necessary IT Governance, Audit & Compliance framework or IT policies, standards, procedures, and guidelines.
- Work closely with all other IT departments unit to prepare SOP and Procedures.
- Lead the design and operation of related compliance monitoring and improvement activities to ensure compliance both with Internal Security Policies etc. and applicable laws and regulations e.g., User Access Review, Resigned IDs, etc.
- To assure that the IT department follows all the standard guidelines to ensure compliance to best practices in the industry, all risk factors are observed & mitigated and readiness for internal or external audits.
- Conduct Audits and Assessments:
- Analyse audit findings, identify root causes, and recommend corrective and preventive actions.
- Monitor the implementation of corrective actions and track progress towards remediation.
- To work closely with IT Section Heads and auditors to support audit activities and to track and follow up on all audit findings till closure.
- Risk Management:
- Update and maintain IT risk register.
- Stay abreast of evolving regulatory requirements.
- To ensure IT Department and processes are compliant to regulatory requirements such as BNM RMIT.
- Stakeholder Management:
- Build and maintain strong relationships with IT teams and other stakeholders.
- Communicate effectively with stakeholders on audit findings and other governance/Risk related matter.
- Provide guidance and support to IT Department on audit or governance matters.
- Reporting and Communication:
- Prepare and present regular reports on the status of audit activities to management.
- Communicate effectively with internal and external auditors.
- Continuous Improvement:
- Continuously monitor and evaluate the effectiveness of the technology governance framework.
- Identify areas for improvement and implement necessary changes.
- Stay abreast of emerging technologies, threats, and best practices in IT governance, risk, and compliance.
Qualifications:
- Education:
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field.
- Experience:
- 5+ years of experience in IT governance, audit, compliance, or risk management.
- Proven experience in developing and implementing governance frameworks and policies.
- Strong background in conducting audits, identifying risks, and managing compliance assessments.
- Experience with regulatory frameworks such as BNM RMIT.
- Ability to work with cross-functional teams and build relationships with stakeholders at all levels.
- Skills:
- Strong understanding of IT security, compliance, and risk management concepts.
- Excellent problem-solving and analytical skills.
- Effective communication and reporting skills, with the ability to present complex information clearly.
- Experience with audit management and risk assessment tools is a plus.
- Proficiency in preparing detailed reports and presenting findings to senior leadership.