About this role
Bank Negara Malaysia (the Central Bank of Malaysia), is a statutory body which started operations on 26 January 1959. Bank Negara Malaysia is governed by the Central Bank of Malaysia Act 2009. The role of Bank Negara Malaysia is to promote monetary and financial stability. This is aimed at providing a conducive environment for the sustainable growth of the Malaysian economy.
Bank Negara Malaysia’s monetary policy stance is to maintain price stability while remaining supportive of growth. Bank Negara Malaysia is also responsible for financial system stability. This is achieved by developing a sound, resilient, progressive and diversified financial sector which serves to support the sectors of the real economy. It also plays an important function in implementing initiatives to deepen and strengthen the financial markets, including the foreign exchange market.
Bank Negara Malaysia has played a significant developmental role in developing the financial system infrastructure in advancing the financial inclusion agenda. This is to ensure all economic sectors and segments of the society have access to financial services. In addition, Bank Negara Malaysia also oversees the nation’s payment systems infrastructure which emphasize on the efficiency and security of the financial systems.
As the banker and adviser to the Government, Bank Negara Malaysia provides advice on macroeconomic policies and the management of public debt. Bank Negara Malaysia is also the sole authority in issuing the national currency and in managing the country's international reserves.
Assist Manager in delivering independent and objective assurance aimed at enhancing the Bank’s operations through a systematic, risk-based approach. This includes evaluating and improving the design and effectiveness of governance, risk management, and control processes towards achievement of the Bank’s strategic objectives and mandates, operational effectiveness and efficiency, as well as compliance with applicable laws and regulations.
- Assist Manager in performing IT audits to provide independent assurance to Board Audit Committee (BAC) on the following:
- Effectiveness of Bank’s governance, risk management and control processes towards the achievement of the Bank’s strategic objectives and mandates.
- Objective risk assessment for value-add insights to BAC on key organisational risks and half-yearly assessment on common audit observations and remedial measures.
- Monitor and ensure effective implementation of remedial actions for closure of audit issues.
- Perform IT audit assessments of complex, technical and new areas, particularly in cyber security, IT and OT infrastructure, cloud & digital initiatives, third-party risks and automated currency operations.
- Provide value-added insights and recommendations to stakeholders in strengthening the control environment of line departments/ BNM and representative offices/ affiliates/ international organisations.
- Assist Manager in providing advisory services and insights on critical and vulnerable areas identified by Senior Management (including ad-hoc assignments, compliance reviews and agile audits).
- Perform the mandatory annual compliance assessments, such as SWIFT Customer Security Controls Framework (CSCF), Information Security Management System (ISMS), Participation Rules for RENTAS Bank Gateway and Malaysia’s Cyber Security Act 2024.
- Implement department’s initiatives/ projects and proposals to ensure alignment with Bank’s business and strategic objectives including procurement of outsourcing/ co-sourcing services.
- Assist Manager in performing assessments on ethics, risk culture and work climate of line departments/ affiliates/ international organisations and escalate the outcomes to respective key stakeholders.
- Perform benchmarking exercises on key risk themes (including but not limited to supervisory and surveillance practices, currency and procurement management, physical and information security, IT, OT, cybersecurity, cloud computing, and BCM) and share best practices to enhance the Bank’s control environment.
- Implement RBIAF to support the effectiveness and efficiency of internal audit function and processes, in line with the IIA Standards.
- Academic Qualifications: A degree in IT and cybersecurity related field and professional certification(s), preferably related to audit (CISA, CISM, CISSP, ISO27001).
- Experience: At least 2 years working experience in IT audit, IT supervision, IT risk functions or relevant working experience.