Head of Internal Audit, Strategy & Planning

About the role

The Cyber Security Agency of Singapore (CSA) is seeking an experienced internal audit professional to establish and lead its Internal Audit function. You will provide independent and objective assurance and advice to support good governance, effective risk management and internal controls, and the achievement of CSA's strategic objectives. You will lead a team focused on operational, financial and compliance audits, while working with GovTech and other specialist assurance providers on technology and cybersecurity audits.

Key responsibilities

• Establish and lead the Internal Audit function in line with the Global Internal Audit Standards (GIAS) and public sector requirements, and set its strategy, operating model and annual risk-based audit plan.
• Provide independent insights to senior management and the Audit Committee on governance, risk and internal control matters, and maintain audit independence and access.
• Lead operational, financial and compliance audits, periodic reviews and advisory engagements, and assess the adequacy and effectiveness of governance, risk management and internal controls.
• Review whistleblowing arrangements and lead or support investigations into significant incidents, allegations or control concerns.
• Work with GovTech and other specialists on technology and cybersecurity audits, and consider their results in the overall risk and control assessment.
• Collaborate with the Ministry Group Chief Internal Auditor to strengthen internal audit processes, and champion digital tools, data analytics and continuous auditing.
• Build, lead and develop a high-performing IA team, mentoring officers in modern audit methodologies.

Required profile

• At least 10 years of internal or external auditing experience, including in a leadership capacity.
• Professional certification such as CIA, CPA or equivalent.
• Strong knowledge of GIAS and internal control frameworks; experience with data analytics and digital tools in audit.
• Good understanding of technology and cybersecurity risks, and experience in a government agency or technology organisation is useful.
• Proven track record of managing audits, leading teams, developing audit strategies and risk-based approaches, and collaborating with central audit functions.
• Desirable: experience transforming audit practices or an internal audit function, and knowledge of audit automation and data visualisation tools.

Required skills

• Independent operation, sound judgement and integrity, with the ability to challenge constructively.
• Analytical, conceptual and problem-solving skills.
• Communication, leadership, coaching, stakeholder management and influencing skills.
• Ability to drive change and work collaboratively with central functions.