Job Description

POSITION GENERAL SUMMARY

Plan and execute risk-based IT audits across MAHB’s infrastructure, applications, and cloud environments. The goal is to verify that technology controls protect company assets, ensure regulatory compliance, and support uninterrupted airport operations, in accordance with IIA Global Internal Audit Standards.

ESSENTIAL POSITION FUNCTIONS

• Execute end-to-end IT audits (planning, testing, documentation) for ITGCs and applications.
• Evaluate risks in operating systems, networks, database security, and cloud architectures.
• Apply data analytics scripts to test full data populations instead of random manual samples.
• Draft fact-based audit findings and track the completion of remediation plans with IT owners.
• Review the security and compliance reports (e.g., VA/PT, SOC 2) of third-party cloud vendors.

Key Challenges

• Understanding evolving and complex information system environment.  
• Develop business acumen to understand root cause of an issue and to develop insightful audit recommendations.
• Manage relations with audit clients, and promote Internal Audit as a valued business partner.
   

Skills

• Experience in technology audit and risk advisory, which includes auditing applications, cybersecurity domains, infrastructure and/ or cloud computing.
• Experience with data analytics and visualisation tools.
• High agency, continuous learning and strong sense of work ownership.
• Excellent command of English and clear communication: Translating complex IT risks into simple language for non-technical business managers
• High level of ethics and integrity.  

Education

External

• Degree in Computer Science, Information Technology, Cybersecurity, Engineering or related fields. Professional certifications such as CISA, CIA, or CISSP are highly preferred and considered a distinct advantage

Relevant Industries

External

• Degree with CGPA > 3.0 and minimum 3 year relevant experience.

Additional Information

Open for Malaysian citizens only.

Please be reminded that only online applications will be entertained.

Applications should reach us by 11 September 2026.

Only the shortlisted candidates will be notified.