{"id":3801059,"url":"https://alion.io/job/paynet-principal-specialist-it-audit","title":"Principal Specialist - IT Audit","company":{"id":2112342,"name":"PayNet","domain":"paynet.my","url":"https://alion.io/company/paynet-my","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BrioHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"PCI DSS","optional":false}],"status":"live","first_seen_at":"2026-11-05T11:27:50Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-05T21:39:31Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Why PayNet / Why Now\nShape trust in Malaysia’s digital payment ecosystem, where platforms such as DuitNow, FPX, MyDebit and JomPAY underpin millions of everyday transactions.\nWork at the intersection of technology, cybersecurity, risk and assurance in an environment where resilience and security have national-scale consequences.\nJoin PayNet as technology, cloud adoption, data platforms and secure engineering practices continue to evolve, creating new risks that demand strong and forward-looking assurance.\nHelp strengthen how PayNet protects information assets and maintains the integrity, security and availability of critical technology systems.\nTL;DR\nLead technology audits that challenge whether risks and controls are genuinely understood and effectively managed.\nApply cybersecurity, cloud, data and DevSecOps expertise to identify control weaknesses and emerging technology risks.\nExercise independent judgment to determine what matters, why it matters and what needs to change.\nInfluence management through clear, evidence-based audit conclusions and practical recommendations.\nFollow findings through to sustainable remediation rather than treating report issuance as the finish line.\nWhy This Role Matters\nPayNet operates technology that supports Malaysia’s digital payment ecosystem, making strong technology governance and controls fundamental to trust and resilience.\nThis role provides independent assurance that technology risks are identified, understood and managed with appropriate controls.\nYour judgment will help uncover weaknesses across cybersecurity, cloud, data platforms, technology infrastructure and engineering practices before they become larger issues.\nYour recommendations will influence how PayNet strengthens controls, improves operational effectiveness and responds to evolving technology risks.\nThis role requires judgment over process: strong assurance comes from understanding risk and challenging controls, not simply completing an audit checklist.\nWhat You Will Actually Do\nLead technology audits independently or with a wider audit team, turning complex technical risks into clear assurance conclusions.\nEvaluate governance, risk management and internal controls across technology systems, infrastructure, cybersecurity, cloud environments, data platforms and technology operations.\nShape practical recommendations that address root causes, strengthen controls and improve the organisation’s resilience and effectiveness.\nInfluence management and Board-level stakeholders through clear, evidence-based communication of audit findings, risks and recommended actions.\nDrive audit observations through remediation by challenging whether corrective actions address the underlying risk and deliver sustainable improvement.\nBuild robust audit programmes, work papers and evidence that clearly demonstrate how audit conclusions were reached.\nExamples of This Role in Practice\nAssess whether security controls around a cloud environment appropriately protect sensitive information and challenge gaps that expose PayNet to material risk.\nReview cybersecurity controls following changes in threats, technologies or operating models and determine whether existing safeguards remain effective.\nExamine database or data-lake controls and identify weaknesses affecting access, security, integrity or governance of critical data.\nEvaluate DevSecOps practices to determine whether security is effectively embedded throughout the software development and deployment lifecycle.\nChallenge a remediation plan that appears complete on paper but does not resolve the underlying cause of an audit observation.\nTranslate a technically complex control weakness into a clear explanation of business risk and required action for senior stakeholders.\nWhat Will Help You Succeed\nRequired: Strong practical knowledge of cybersecurity and/or cloud security, with the ability to translate technical concepts into risk and control implications.\nRequired: Experience with database or data-lake operations/security and/or DevSecOps practices, combined with the judgment to assess whether controls are genuinely adequate.\nRequired: Strong critical and analytical thinking, particularly when evidence is incomplete, controls are complex or the right conclusion is not immediately obvious.\nRequired: Clear communication and presentation skills, including the confidence to challenge constructively and explain audit conclusions to technical and senior stakeholders.\nHelpful: Exposure to payment systems, technology audit or major consultancy environments, and data analytics techniques or tools.\nHelpful: Practical knowledge of recognised technology and security frameworks such as ISMS, COBIT and PCI DSS, or other relevant IT standards.\nWhat changed\nRemoved task-heavy wording such as “responsible for” and “ensure” in favour of Lead, Evaluate, Shape, Influence, Drive, and Build.\nMade the role’s real technical focus clearer: technology audit + cybersecurity/cloud + data/DevSecOps + risk and controls.\nSeparated required capabilities from helpful differentiators, making candidate screening easier.\nAdded practical scenarios so candidates can quickly judge whether their actual experience matches the role.\nPreserved the original JD requirements without adding arbitrary years of experience or unnecessary qualification barriers.","description_format":"text","description_chars":5341,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Payment Processing & Gateways","Information Security"],"lifecycle":[{"event":"open","at":"2026-11-05T11:27:50Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":11,"reasons":["conf:2","win:early"],"computed_at":"2026-11-05T23:54:25Z"},"pay":null,"html_url":"https://alion.io/job/paynet-principal-specialist-it-audit","json_url":"https://alion.io/job/paynet-principal-specialist-it-audit.json","meta":{"generated_at":"2026-11-05T23:54:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5425,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2112342},"rest":"https://alion.io/mcp/rest/get_company?id=2112342"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpaynet-principal-specialist-it-audit"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpaynet-principal-specialist-it-audit"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpaynet-principal-specialist-it-audit"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/paynet-principal-specialist-it-audit\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpaynet-principal-specialist-it-audit"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3801059}},{"tool":"search_jobs","arguments":{"company":"paynet.my","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3801059},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}