About The Role

Moomoo is a comprehensive brokerage platform that empowers proactive investors to take control of their financial future with ease and confidence. We integrate professional trading data, global financial news, a trading community, and an innovative web platform to provide users with better data, tools, and performance.

Join our dynamic team at Moomoo as a IT Auditor team, where your passion for finance and technology can thrive.

Participate in IT audits, information security audits, and basic compliance audits across the Group and Malaysia.
Conduct IT General Controls (ITGC) audits covering areas such as access controls, user access management, system changes, application development, IT operations, and data backup.
Assess the design and operating effectiveness of controls across systems and technology processes, identify risks, and provide recommendations for remediation.
Conduct audit interviews, process walkthroughs, control testing, sample testing, and audit working paper preparation.
Assist in reviewing information security, cybersecurity, data security, business continuity, and third-party technology risks.
Follow up on audit findings and remediation progress, and validate the effectiveness of remediation actions.
Work closely with R&D, IT operations, information security, compliance, and business teams to coordinate audit documentation and project arrangements.
Assist in enhancing the Group's IT audit procedures, audit checklists, and related tools.
Bachelor's degree or above in Computer Science, Information Systems, Information Security, Audit, Accounting, or a related discipline.
2–4 years of relevant experience in IT audit, IT governance, technology risk, information systems controls, or related areas.
Experience in global IT audit / IT audit projects covering multiple countries or regions will be an added advantage.
Candidates with IT audit experience from Big 4 accounting firms are preferred.
Candidates with experience in the banking, capital markets, securities, or financial services industry are preferred.
Strong knowledge of ITGC audit methodologies, with the ability to independently conduct interviews, control testing, prepare audit working papers and reports, and proactively follow up on audit findings and remediation.
Good understanding of key technology concepts, including access controls, user access management, system development and changes, IT operations, database management, and cybersecurity.
Strong risk identification, analytical, report writing, and cross-functional communication skills.
Proficient in English, with the ability to communicate effectively in both written and verbal settings. Mandarin proficiency is an added advantage.
Bumiputera candidates are encouraged to apply.
Willing to collaborate across different regions and undertake short-term business travel when required.

Preferred Qualifications

Familiarity with Malaysia's IT, cybersecurity, data protection, or financial regulatory requirements.
Experience with SOX, SOC, ISO 27001, or other technology compliance/audit projects.
Professional certifications such as CISA, CIA, CISSP , or currently pursuing relevant certifications