ICT & SS Auditor

About the role

GovTech, the agency driving Singapore’s Smart Nation initiatives, is seeking an ICT & SS Auditor to strengthen internal controls and mitigate IT risks across critical systems and infrastructure. You will work closely with auditees and senior management to ensure robust governance and security practices.

Key responsibilities

• Develop and customise audit programmes and security checklists to assess design and operating effectiveness of internal controls.
• Plan, execute and report on annual policy compliance, technical, and process audits for critical systems.
• Manage auditee interactions, including briefings, fieldwork, management responses and follow‑up actions.
• Review audit findings, monitor remediation, and validate that root causes are addressed.
• Oversee outsourced IT audits, including VAPT, from procurement to payment verification.
• Serve as the primary escalation point for outsourced auditors and auditees.
• Summarise audit results for management reporting and recommend improvements to IT security, governance and risk management.
• Contribute to internal audit transformation initiatives such as AGEM, continuous auditing, and IM8 operationalisation.

Required profile

• Degree in an IT discipline or equivalent.
• Professional certifications such as CISA and cloud security certifications.
• Minimum 5 years of experience in ICT audit or compliance management.
• Audit experience covering cyber security, network and infrastructure, cloud security, virtualisation, and application security.

Required skills

• CISA certification
• Cloud security
• Network and infrastructure security
• Virtualisation
• Application security
• Vulnerability Assessment and Penetration Testing (VAPT)
• Data management and storage

What we offer

• Purposeful career contributing to Singapore’s Smart Nation vision.
• Robust learning and development opportunities throughout the year.
• Opportunity to work on high‑impact public sector digital transformation projects.