IT Controls Assurance Specialist, AVP (Contract)

About Maybank Securities

Maybank Securities (MSSG) is a leading brokerage and investment bank across ASEAN, Maybank Securities provides services in corporate finance & advisory, debt markets, equity capital markets, derivatives, retail and institutional securities broking & research and Prime Brokerage.

Job Description:

MSSG is looking for an IT Controls & Assurance Specialist to support the Technology function in managing audit, regulatory, and assurance matters. The role acts as a key liaison with auditors and internal stakeholders, ensuring IT controls are documented, operating as intended, and aligned with regulatory expectations such as MAS TRM.

Key Responsibilities:

Audit & Assurance Support

• Support external audit, internal audit, and regulatory reviews related to IT controls
• Coordinate audit evidence, walkthroughs, and responses in partnership with technology teams
• Assist in drafting clear and accurate management responses to audit observations
• Track audit issues and support timely remediation

IT Controls & Documentation

• Maintain IT control documentation, SOPs, and control narratives
• Assist in identifying control gaps and improvement opportunities
• Support periodic reviews of access, change, and operational controls
• Ensure documentation remains current and audit-ready

Regulatory & MAS TRM Alignment

• Support alignment of technology controls with MAS TRM requirements
• Review regulatory notices, circulars, and guidelines, and assess them against current technology practices to ensure ongoing compliance
• Highlight gaps or required changes to relevant technology stakeholders
• Assist in regulatory inspections and information requests

Technology & Infrastructure Understanding

• Develop and maintain understanding of infrastructure, applications, and operational processes
• Support control considerations for legacy systems and vendor platforms
• Assist with control assessments following incidents or system changes

Incident & Issue Support

• Support incident reviews from a controls and assurance perspective
• Assist in preparation of RCAs and control-related follow-ups

Required Skills and Qualifications:

• Bachelor's degree in Computer Science, Engineering, or a related field (or equivalent practical experience).
• At least 5–8 years of experience in IT controls, technology operations, audit, or assurance roles
• Good working knowledge of IT infrastructure and operational processes
• Working knowledge of MAS TRM requirements
• Experience supporting audits and regulatory reviews
• Strong documentation and communication skills

Preferred Skills:

• Experience in financial services or regulated environments
• Prior exposure to legacy platforms and vendor-managed systems
• CISA or similar certification

We regret that only short-listed candidates will be notified.