About This Role
This IT Auditor role involves participating in IT and information security audits, as well as basic compliance audits across Moomoo's group and in Malaysia. The position is well-suited for a professional with a passion for finance and technology who can assess and improve control effectiveness.
Responsibilities
- Participate in IT audits, information security audits, and basic compliance audits across the Group and Malaysia
- Conduct IT General Controls (ITGC) audits covering areas such as access controls, user access management, system changes, application development, IT operations, and data backup
- Assess the design and operating effectiveness of controls across systems and technology processes, identify risks, and provide recommendations for remediation
- Conduct audit interviews, process walkthroughs, control testing, sample testing, and audit working paper preparation
- Assist in reviewing information security, cybersecurity, data security, business continuity, and third-party technology risks
- Follow up on audit findings and remediation progress, and validate the effectiveness of remediation actions
- Work closely with R&D, IT operations, information security, compliance, and business teams to coordinate audit documentation and project arrangements
- Assist in enhancing the Group's IT audit procedures, audit checklists, and related tools
Requirements
- Bachelor's degree or above in Computer Science, Information Systems, Information Security, Audit, Accounting, or a related discipline
- 2–4 years of relevant experience in IT audit, IT governance, technology risk, information systems controls, or related areas
- Strong knowledge of ITGC audit methodologies, with the ability to independently conduct interviews, control testing, prepare audit working papers and reports, and proactively follow up on audit findings and remediation
- Good understanding of key technology concepts, including access controls, user access management, system development and changes, IT operations, database management, and cybersecurity
- Strong risk identification, analytical, report writing, and cross-functional communication skills
- Proficient in English, with the ability to communicate effectively in both written and verbal settings
- Willing to collaborate across different regions and undertake short-term business travel when required
Nice to have:
- Experience in global IT audit / IT audit projects covering multiple countries or regions
- IT audit experience from Big 4 accounting firms
- Experience in the banking, capital markets, securities, or financial services industry
- Mandarin proficiency
- Familiarity with Malaysia's IT, cybersecurity, data protection, or financial regulatory requirements
