IT Auditor

About the role

Assurity Trusted Solutions (ATS), a subsidiary of GovTech, is seeking an experienced IT Auditor to lead risk‑based audits of ICT systems, applications and infrastructure across government agencies. The role involves managing the full audit lifecycle, engaging stakeholders and delivering actionable recommendations to strengthen governance and security.

Key responsibilities

• Plan, design and execute policy‑based, process and technical audits of systems, applications and supporting infrastructure.
• Manage stakeholder engagements throughout audit planning, fieldwork, reporting and follow‑up to ensure timely delivery.
• Assess ICT governance, risk management and control practices across agencies and the Whole‑of‑Government environment.
• Develop practical, risk‑based recommendations and monitor remediation of audit findings.
• Conduct ICT & SS audits as assigned by GovTech’s Internal Audit Division, including in‑depth reviews of processes, applications, systems and infrastructure.
• Maintain audit findings in the central audit repository and facilitate reporting.

Required profile

• Minimum 6 years of experience delivering end‑to‑end IT audit engagements.
• Strong understanding of cybersecurity principles, risk assessment and regulatory requirements.
• Experience evaluating controls against frameworks such as COBIT, ITIL, NIST and ISO/IEC 27001.
• Professional certifications (e.g., CISA, CISSP, CISM, CRISC) are advantageous.
• Excellent communication, stakeholder management and project planning skills.

Required skills

• IT audit methodology
• Cybersecurity risk assessment
• COBIT, ITIL, NIST, ISO/IEC 27001 frameworks
• Cloud platforms: AWS, Azure, GCC
• SaaS security and application security concepts
• Familiarity with IM8 or equivalent ICT governance policies