Senior Auditor, Digital

About us Worley is a global company of energy, chemicals and resources experts headquartered in Australia. We partner with our customers to deliver projects and create value across the life of their assets. We specialize in consulting, engineering, procurement and construction across the project lifecycle, with services extending through to operations and decommissioning. Leveraging extensive experience and AI-enabled delivery, we support customers in navigating complexity as they meet today's needs and transition to more sustainable solutions. About the job We’re looking for a Cyber Security Analyst II to join our Malaysia team. As a Cyber Security Analyst II , you will be responsible for working with various stakeholders across the business on cybersecurity compliance audits, vendor cybersecurity risk assessments and other compliance activities to continuously improve Worley’s cybersecurity practices. To succeed in this role, you should have experience in information systems audit, preferably IS assurance with a professional services firm or IT internal audit. What you’ll do We are looking for a Cyber Security Analyst II to join our team Malaysia. The role responsibilities include: Serve as 2nd line of defense for Worley Digital. Conduct control assessments independently to evaluate compliance with the Worley Security Framework and COBIT, with a strong emphasis on security controls, aligning with external security standards including NIST CSF, ISO 27001, and the ACSC Essential Eight. Promote greater awareness and enhance the maturity of the control environment among first-line control owners. Deliver practical and actionable recommendations to address identified control gaps. Collaborate with cross-functional teams to support control owners in developing and implementing effective remediation plans. Deliver monthly reports on the status and outcomes of the control assessment program. Coordinate activities and maintain effective communication between Quality Assurance, Internal Audit, external certification bodies, and external auditors. Support with meeting customer-specific information security compliance obligations, including audit facilitation, certifications, and assessment responses. Support with assessment and information security risk management related to Worley suppliers. What you’ll have Education – Qualifications, Accreditation, Training: A relevant bachelor’s degree. Certifications such as – CIA, CISA, CRISC, CISSP 5 + years of experience in information systems audit, preferably IS assurance with a professional services firm or IT internal audit. Job Specific Knowledge / Experience: Demonstrated ability to partner and collaborate effectively with stakeholders, demonstrating an appreciation of both IT and business strategy. Advanced awareness of full technology stack. Demonstrated ability to identify material information security control weaknesses and recommend pragmatic remediation action plans, while managing potentially contentious situations. Exceptional attention to detail, with the aptitude to collect, analyze and conclude on data. Demonstrated ability to produce clear, concise, and logical audit working papers and audit reports. Operational knowledge of data handling and confidentiality. Ability to work in a fast-paced unstructured customer-centric environment across multiple geographies and operational contexts. Knowledge of frameworks including ITIL, COBIT, NIST CSF (Cyber Security Framework), Essential 8 and ISO27001. IT Skills: Advanced user in MS Office applications (including MS Visio) and MS SharePoint Advanced awareness of full technology stack. People Skills: Interpersonal: Builds appropriate, constructive, and effective business relationships throughout the organization; uses diplomacy and tact; is approachable; communicates clearly, accurately, and consistently both verbally and in written matters. Employs the principles of active listening and encourages feedback from others.