Assistant Manager - Internal Audit, Risk and Compliance

Key Responsibilities:

• This position reports directly to the Manager - IRC and is responsible for overseeing risk management, internal auditing, including information security (ISO27001) audits, and compliance support within Scicom Group.
• The role encompasses a variety of risk management, internal audit, and compliance activities, along with additional tasks as needed.
• Conduct internal audits, including information security (ISO27001) audits, follow-up audits, and other ad-hoc audits, ensuring comprehensive documentation of audit activities for review by the Manager – IRC.
• Evaluate draft QMS documents from operational and shared services, offering constructive feedback to ensure processes and controls adequately address risks and align with other organizational processes at Scicom.
• Coordinate, prepare, and deliver engaging presentations and workshops for Scicom Group employees and management regarding compliance and risk management initiatives.
• Manage matters related to the Quality Management System (QMS).
• Act as a liaison with ISO representatives within Scicom, including managing SES access control for those representatives.
• Ensure the delivery of precise, professional, and timely compliance and internal audit services within Scicom Group, covering risk and compliance management, internal control systems, and business continuity management.
• Collaborate with operational teams to oversee the complete external certification processes such as ISO, ISMS, SCP, etc.
• Proactively support the establishment, implementation, and maintenance of an effective risk management, audit, and compliance framework along with associated policies and processes.

Required Skills:

• Bachelor's degree or a professional qualification (CISA, CIA, ACCA MIA, CPA, or other IT audit-related qualifications).
• A minimum of 3 years of relevant experience in IT audit or compliance.
• Mandatory knowledge and experience in conducting internal audits for ISO 27001 Information Security Management System and ISO 9001 Quality Management System.
• Experience in investigative audits and/or enterprise risk management frameworks is a plus.
• Strong communication skills, along with proficiency in report writing, analytical thinking, and interpersonal relations.
• Proven track record in executing internal audit programs, including fieldwork, reporting, and final sign-off processes.
• Experience in enhancing compliance frameworks, policies, and practices is essential.
• Ability to manage complex assignments that significantly influence organizational goals.
• Capable of self-management, fostering collaboration in team settings, contributing to a team-oriented culture, and sharing responsibility for achieving objectives.
• Exemplary customer focus with a dedication to building relationships at all organizational levels, effectively managing conflict, understanding needs, negotiating favorable outcomes, and delivering value-added services.

Compensation Package:

• Competitive Salary: Up to RM8,000 monthly, based on experience.
• Performance-Related Allowance paid bi-annually.
• 15 days of Annual Leave.
• 14 days of Medical Leave.
• Comprehensive medical and hospitalization insurance coverage.

Experience Level:

• Mid-Senior Level

Work Location:

• Kuala Lumpur, WP, Malaysia.

Job Type:

• Full Time.