M Shaiffullyzan Amran, CISA, CC (ISC2)

Head, IT & Digital SSC, UMW Services @ UMW

About

CISA Certified Internal Audit Manager with more than 15 years audit experience in IT and business operations audit. Well versed in all the audit process from planning, fieldwork, reporting to stakeholder management for internal and external at various level. Vast experience in cybersecurity audits in both IT and Operation Tech (OT) in addition of IT Governance, Operations, IT Applications and IT Project audit. Advocating using Data analytics and data visualization in audit. Contributor in Digital transformation for Internal Audit improvement initiative. Development, providing leadership and coaching to IT audit/analytics team.

Country

Malaysia

City

Kuala Lumpur

Industry

Construction

Skill

IT Service Management, Managed Services, Microsoft Copilot Studio, Workflow Automation, Robotic Process Automation (RPA), Shared Services, People Development, Coaching, Team Leadership, Active Directory, Network Services, Asset Management, Gigabit Ethernet, Business Continuity, Routers, Network Switches, Dynamic Host Configuration Protocol (DHCP), IT Service Delivery, Novell Netware, Lotus Notes

Experience

Head, IT & Digital SSC, UMW Services

UMW

2025-1 - Present · 1 yr 9 mos

Greater Kuala Lumpur

Leading a team of system developers in delivering IT solution in automated workflow, Robotic Process Automation (RPA), Microsoft Power platform and AI.

Internal Audit Manager

Sime

2024-3 - 2025-1 · 11 mos

Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia

Leading a team in integrating audit process in UMW to fit in Sime work process in Teammate Teamstore. Conducted assessment on objectives, risks, control and audit programs for UMW business entity including established standards ISO27K, COBIT2019, All Toyota Security Guideline (ATSG) etc. in aligning the "to-be" work process for UMW Divison in Sime.

Assistant Vice President II, Group Internal Audit Division

UMW

2021-6 - 2024-3 · 2 yrs 10 mos

Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia

Heading IT and Manufacturing&Engineering (M&E) audit portfolio. Data Analytics in auditing via ACL and Power BI as data visualization tool. Building audit team proficient in IT audit, Cyber security, data management and data analysis.

Manager - Digital Audit

PETRONAS

2019-3 - 2020-10 · 1 yr 8 mos

Kuala Lumpur, Malaysia

Developing Digital Roadmap for Internal Audit. Implementation of Analytics in Audit including Continuous Auditing. Development of Data visualization for audit using Tableau. Exploring in the application of RPA, ML and AI for structured and unstructured data analytics in audit.

Audit Manager

PETRONAS

2014-6 - 2020-10 · 6 yrs 5 mos

Kuala Lumpur, Malaysia

Leading a team of auditors and Line Resource in planning, fieldwork, reporting and stakeholder management in delivering the value for audit. Coaching non-IT auditors on the process for IT audit and encouraging the usage of analytics tool in audit. Leading the planning and strategizing the yearly audit plan for IT related audit in line with the business objectives, current IT risk and trends to propose areas for audit

POD Lead

PETRONAS

2018-2 - 2019-1 · 1 yr

Kuala Lumpur, Malaysia

Leading POD team as product owner (Agile) in delivering Minimum Viable Product (MVP) for Internal Audit Digital Program

Auditor

PETRONAS

2008-8 - 2014-5 · 5 yrs 10 mos

Execution of audit fieldwork, performing data analysis, managing stakeholders, highlighting control deficiency and provide recommendations in audit reports. Vast exposure for IT related and business operations within PETRONAS.

Data Management Executive

PETRONAS Carigali Sdn Bhd

2004 - 2008 · 4 yrs

Ensuring the availability of the system and safekeeping of Geological and Geophysical (G&G) data for Petroleum Engineering for Peninsular Malaysia, Sabah and Sarawak.

Network Engineer

PETRONAS Penapisan (Melaka) Sdn Bhd

1997 - 2004 · 7 yrs

Ensuring the availability of critical IT infrastructure (Router, LAN switch, Servers, antivirus, backup, datacenter etc) operation within the Service Level Agreement (SLA).