
Internal Audit Manager - Technology
- Singapore
- Permanent
- Full-time
- Develop Audit Planning Memorandums (APM) to identify the objectives and scope of audit for review and approval by the Audit Lead Manager/Audit Director
- Execute operational audits with a focus on assessing the effectiveness of IT controls and cybersecurity measures.
- Conduct detailed fieldwork, including walkthroughs, control testing, and data analysis, to evaluate the design and operating effectiveness of IT controls.
- Assess the adequacy of cybersecurity controls and safeguards to protect sensitive data and systems from unauthorized access, disclosure, and misuse.
- Identify control deficiencies and provide recommendations for improvements to enhance IT control environment and cybersecurity posture.
- Review and assess the reliability, accuracy, and integrity of IT systems and data, with specific attention to data privacy and protection controls.
- Evaluates design of computer systems under development to make sure they will function effectively; are developed according to established procedures; have adequate controls to detect problems; are properly documented.
- Performs system reviews on overseas operations and joint ventures to evaluate their efficiency and effectiveness in ensuring data integrity and security.
- Partake in ad-hoc reviews and other investigative work under the direction of the Audit Lead Manager/Audit Director as assigned by the Audit Committee or senior management.
- Assist in the development and implementation of audit programs and methodologies, including cybersecurity audit procedures.
- Prepare clear and concise audit workpapers documenting audit procedures, findings, and recommendations.
- Completes follow-up reviews to ensure adequacy and timeliness of corrective actions.
- Involved in ad-hoc projects, i.e., annual audit plan, budgeting, IA Website
- Stay current with emerging trends and technologies in the IT and cybersecurity industry, and apply relevant knowledge to audits.
- Bachelor's degree in Computer Science, Information Systems, or related field
- Relevant professional certifications (e.g., CISA, CISSP)
- Minimum 4 years of IT auditing, internal controls, or cybersecurity experience with a focus on executing operational audits.
- Strong knowledge of IT audit methodologies, frameworks, and standards (e.g., COBIT, ISO 27001, NIST)
- In-depth understanding of IT general controls, application controls, security controls, and cybersecurity principles
- Strong report writing and documentation skills
- Excellent analytical, problem-solving, and critical thinking skills
- Strong communication and interpersonal skills
- Detail-oriented with strong organizational and time management skills