Senior IT Auditor

About the role

Assurity Trusted Solutions (ATS), a wholly owned subsidiary of the Government Technology Agency (GovTech), is hiring a Senior IT Auditor in Singapore. The role covers end-to-end management of ICT and security audits of government agencies, including planning, fieldwork, reporting and follow-up, and involves managing outsourced audit resources.

Key responsibilities

• Develop and tailor audit programmes, security audit checklists and assessment methodologies to evaluate the design and operating effectiveness of internal controls against ICT risks.
• Plan, design and execute policy risk-based, process and technical audits of systems, applications and supporting infrastructure.
• Manage stakeholder engagements across the audit lifecycle, from planning and briefings to fieldwork, management discussions, response reviews and follow-up.
• Review audit observations and develop risk-based recommendations and mitigation measures to strengthen ICT governance, security and controls.
• Collaborate with stakeholders to assess issues, identify root causes and monitor corrective actions to ensure findings are remediated.
• Plan, procure and manage outsourced audit resources and augmentation services.
• Conduct ICT and security audits of government agencies as assigned by GovTech's Internal Audit Division, and report findings in the central audit repository.

Required profile

• At least 6 years of relevant experience in IT audit, with a proven track record of delivering audit engagements.
• Proven experience leading end-to-end IT audit engagements, including planning, fieldwork, reporting and follow-up.
• Strong communication, stakeholder management, influencing and project planning skills.

Required skills

• Strong understanding of cybersecurity principles, risk assessment, regulatory requirements, threats, vulnerabilities and security governance.
• Experience assessing IT governance, controls and processes against frameworks such as COBIT, ITIL, NIST and ISO/IEC 27001.
• Familiarity with IM8 or equivalent ICT governance and security policies is advantageous.
• Experience in cloud computing (AWS, Azure, GCC), SaaS, application security or application development is advantageous.
• Certifications such as CISA, CISSP, CISM or CRISC are advantageous.

What we offer

• A learning culture with annual leave, family care and birthday leave.
• A collaborative working environment with helpful team members.