Executive/Specialist/Assistant Manager - Risk and Compliance

Kuala Lumpur

Published 17 hours ago

The Responsibilities of the Role: -

  • Conduct ISO internal audits, including Information Security Management System (ISO 27001), Quality Management System (ISO 9001), and other ad-hoc audits, including audit planning, execution, documentation of audit work performed, reporting, and communication of audit findings.
  • Plan, execute, and finalise of  ISMS, QMS and ad-hoc follow-up audits, ensuring all non-conformities, observations, and corrective actions are properly tracked, validated, and closed.
  • Review and track draft QMS documentation submitted by Operations and Shared Services, providing constructive feedback to support continuous improvement, strengthen adequacy of processes and controls, and ensure alignment with internal requirements and compliance standards
  • Maintain and update Scicom Anti-Bribery and Anti-Corruption Risk Registers, ensuring completeness, accuracy, and timely updates in line with governance requirements.
  • Maintain and update or review Scicom Anti-Bribery and Anti-Corruption Risk Registers, ensuring completeness, accuracy, and timely updates in line with regulatory requirements.
  • Maintain and update records relating to inbound gifts, hospitality, and entertainment declaration in accordance with ABAC policies.
  • Maintain and update departmental ISMS/QMS documents, including Access Control Lists (ACL), Risk Treatment Plans (RTP), and Record Retention Schedule (RRS), ensuring timely revisions following reviews or as required.
  • Prepare, update and maintain departmental trackers for all Process Implementation Approval Forms (PIAF) and Document Change Requests (DCR), ensuring proper monitoring, status tracking, and closure including the SES document management.
  • Maintain and update the Scicom Senior Management Team organisation chart to ensure accuracy and alignment with current reporting structures including the SES document management.
  • Maintain and update the ISO Representative trackers, ensuring accurate monitoring of appointments, responsibilities, and compliance-related records and manage the SES access control management of ISO representatives.
  • Maintain and update departmental QMS documentation to ensure consistency, relevance, and compliance with internal and external requirements, including Board and Board Committee requirements.
  • Act as a representative of the RC department in OSHA and Sustainability Committee meetings, ensuring alignment with regulatory, compliance, and organisational requirements.
  • Coordinate, prepare and deliver presentations and workshops to employees within Scicom Group and management on compliance and risk management activities.
  • Support the Manager - RC in the administration and management of Quality Management System related matters including SES document management.
  • Support Operations teams in managing the end-to-end external certification processes (ISO, ISMS, SCP, etc,) including coordination, documentation support, and audit readiness activities where required.
  • Perform any other special assignments, ad-hoc tasks as may be required to support the operation of RC function and overall governance requirements.

The Requirements for the Role: -

Qualification & Skills Requirements:

  •  Bachelor’s degree or professional qualification (CISA, CIA, ACCA MIA, CPA and/or other IT audit related professional qualification).
  • Knowledge and experience in internal auditing for ISO 27001 Information Security Management System and ISO 9001 Quality Management System is mandatory.
  • Professional certification in ISO 27001 Internal Auditor, ISO 9001 Internal Auditor, or equivalent is an advantage.
  • Knowledge and experience in investigative audit and/or enterprise risk management framework will be an added advantage.
  • Strong knowledge of internal control processes, corporate governance principles, regulatory requirements and risk management practices.
  • Strong leadership attributes with high professional integrity, maturity, independence, and excellent analytical skills.
  • Proficiency in Microsoft Office, Microsoft Excel, Microsoft Visio & PowerPoint
  • Ability to manage multiple tasks, meet deadlines, and work independently with minimal supervision
  • Strong analytical and critical thinking skills with attention to detail.
  • Ability to review, assess, and enhance processes and documentation effectively.
  • Strong written and verbal communication skills, including report writing and presentation delivery.
  • Strong stakeholder management skills, with the ability to engage effectively across Operations, Shared Services, and Management teams.
  • High level of integrity, professionalism, and confidentiality in handling sensitive compliance matters.

 

Work Experience:

  • Minimum 3-5 years of experience in IT audit, internal audit, risk or compliance related roles.
  • Proven experience in conducting internal audits (ISO 27001, ISO 9001 or equivalent) and managing audit lifecycle activities (planning, execution, reporting, and follow-up).
  • Demonstrated experience in reviewing and continues improvement of compliance frameworks, policies, practices and processes.
  • Experience in handling complex assignments with a wide-ranging impact on organizational objectives.
  • Ability to work independently and collaboratively in a team environment, contributing to a strong culture of teamwork and shared accountability for results.
  • Strong customer-focused mindset with experience in building relationships across all levels of staff and management, managing conflict effectively, understanding stakeholder needs, and delivering value-added outcomes.
  • Proven strong written, verbal, and presentation skills with the ability to communicate effectively across technical and non-technical audiences.

 

The Package: -

  • Attractive Basic Salary 
  • Performance Related Allowance 
  • Annual Leave 15 days.
  • Medical Leave 14 days.
  • Medical and hospitalization coverage.

Full time

Entry Level

Kuala Lumpur