Senior Audit Manager – Information & Cyber Security

About the role

The Senior Audit Manager will join the Information & Cyber Security team within Standard Chartered Bank's Group Internal Audit & Investigations function. Based in Singapore or Hong Kong, the role combines deep technical security expertise with internal audit experience to provide independent assurance on cyber risk.

Key responsibilities

• Support the Head of Audit in developing risk assessments and audit plans for the cyber security portfolio.
• Lead the planning, fieldwork, and reporting of high‑risk internal audit engagements, ensuring delivery within budget and timelines.
• Provide supervision, guidance and quality review for audit teams, championing the use of AI and data analytics in audit work.
• Identify and document audit findings, work with management to obtain actionable remediation plans, and track implementation.
• Share knowledge and conduct training on information and cyber security topics for internal auditors and stakeholders.
• Contribute to talent development and career growth within the audit function.

Required profile

• Strong technical background in identity and access management, vulnerability management, code security, security operations, threat intelligence, red‑team and purple‑team activities, and penetration testing.
• Experience with cyber security frameworks and standards such as NIST and CIS.
• Solid risk management and internal audit experience, preferably within a banking or financial services environment.
• Exposure to AI security and digital asset protection is highly desirable.
• Proven ability to lead audit teams, provide independent assurance, and communicate findings effectively.

Required skills

• Identity and Access Management (IAM)
• Vulnerability Management
• Application/Code Security
• Security Operations Center (SOC) processes
• Threat Intelligence
• Red‑Team and Purple‑Team methodologies
• Penetration Testing
• NIST Cybersecurity Framework
• CIS Controls
• Risk Management
• AI Security concepts (exposure)
• Digital Asset security (exposure)