
Associate/AVP, IT Audit, Internal Audit Department
- Singapore
- Permanent
- Full-time
- Plan and execute audits of technology infrastructure, applications, cloud, information and cybersecurity processes
- Evaluate system controls supporting business processes as part of integrated audits
- Develop and maintain IT audit programs/tests with innovation and creative thinking leveraging on data science and analytics
- Identify deficiencies and provide practical recommendations to remediate and address identified risks
- Obtain buy-in from senior stakeholders for audit issues and recommendations, draft audit findings and reports
- Provide clear and organized documentation of the audit processes and findings
- Identify emerging risks in the environment through continuous monitoring and risk assessment, regular engagements with stakeholders and propose changes to the IT audit work plan and scope where required
- Benchmark against market best practices, review and recommend improvements to existing audit processes and methodologies
- Establish and maintain collaborative working relationships with stakeholders. Strengthen the firm's control environment through advisory and collaboration initiatives
- Support the development of continuous audit initiatives within IAD
- Relevant degree in Computer Science, Information Systems or its equivalent from a reputable education institute, with professional certification in security and controls such as CISA, CISSP, CISM
- Possess at least 4 years (Associate) and 8 years (AVP) of IT audit or IT risk management & control work experience, preferably with internal audit experience in the Banking and Finance Industry. Candidates with additional security experience in cloud, infrastructure (e.g., network/system/database), and cybersecurity (such as platform administrators, engineers) who are interested in a career in Technology Audit will also be considered
- Demonstrated experience in the use of data analytics and visualization tools
- Experienced in managing and executing fieldwork, issue writing and reporting
- Experienced in reviewing technology domains across infrastructure, applications, cyber security, cloud technology, governance processes and horizontal IT processes
- A good understanding of emerging technology risks and trends. Demonstrate strong ability to pick up knowledge and conduct reviews on new emerging technology domains
- Self-motivated, independent in thought process and yet displays strong team orientation
- Strong conceptual, analytical and problem-solving skills
- Strong interpersonal and communication skills, with ability to engage and network with stakeholders at different levels