Lead, Technology Audit

About the role

Nanyang Technological University (NTU) Singapore is looking for a Lead, Technology Audit to lead and develop its Information Technology audit capability. The role provides independent assurance to the Audit & Risk Committee and senior management on the effectiveness of IT governance, cybersecurity, technology risk management, data governance, digital transformation initiatives and IT controls across the University.

Key responsibilities

• Develop and maintain the annual risk-based technology audit plan aligned with strategic, operational and cybersecurity risks.
• Build and lead NTU's technology audit capability, methodologies, tools and analytics.
• Lead audits covering IT governance, cybersecurity, infrastructure, cloud, enterprise applications, data governance and digital transformation.
• Assess identity and access management, Active Directory, privileged access, incident response, vulnerability management, business continuity and disaster recovery controls.
• Review major technology projects and enterprise systems, and audit AI, machine learning and advanced analytics initiatives where applicable.
• Use data analytics and continuous auditing to strengthen audit effectiveness and promote technology-enabled auditing across Internal Audit.
• Assess technology risks supporting research activities, laboratories, high-performance computing environments and research data management.
• Build strong working relationships with the CIO and the IT leadership team, and present audit findings and key technology risks to senior management and the Audit & Risk Committee.
• Lead and coach technology auditors and co-sourced specialists, develop technical competencies within Internal Audit, and manage external consultants and subject matter experts.

Required profile

• Degree in Information Systems, Computer Science, Information Security, Accounting or a related discipline; Master's degree preferred.
• Minimum 12-15 years of IT audit, cybersecurity or technology risk experience.
• At least 5 years in a leadership role.
• Experience auditing complex technology environments and digital transformation initiatives.
• CISA, CIA, CISM, CISSP, CRISC, CA or CPA preferred.

Required skills

• Technical knowledge: COBIT, NIST Cybersecurity Framework, ITIL, COSO, cloud platforms (Azure, AWS, Google Cloud), ERP systems and Identity & Access Management.
• Key competencies: strategic thinking, technology risk management, cybersecurity assurance, executive presence, stakeholder management, communication and report writing.