Manager, IT Internal Audit

About the role

EY's Risk Consulting practice in Singapore is hiring a Manager for its IT internal audit team. You will lead engagements that identify technology control enhancements, IT operational and compliance improvements and cost-saving opportunities, and advise management and boards on the effectiveness of controls and processes. The role suits someone who wants to shape services, build client relationships and grow within a structured career framework.

Key responsibilities

• Guide and mentor team members and take part in procedures, especially on complex, judgmental or specialised issues
• Work with the team and the client to plan engagements and set strategies that meet professional standards and address engagement risks
• Brief the engagement team on the client's IT environment and industry IT trends
• Develop risk-based IT internal audit plans aligned to client objectives, emerging risks and regulatory requirements
• Evaluate the design and operating effectiveness of IT and cybersecurity controls across domains such as cybersecurity, cloud computing, ERP systems, data governance, third-party risk and IAM
• Manage the engagement budget, timeline and quality of deliverables
• Write clear, objective audit reports and present observations and recommendations to senior management, audit committees and boards where required
• Challenge findings, root cause analyses and management action plans, and monitor engagement quality against EY methodology, IIA Standards and client frameworks
• Support proposal development, client pursuits and business development, and build relationships with client stakeholders and internal EY service lines

Required profile

• University degree or equivalent professional qualification in accounting, business, information technology or a related discipline
• At least 6 years of relevant experience, including a minimum of 4 years in IT audit or IT risk consulting within a public accounting firm, professional services firm or industry environment
• Ability to travel up to 20% of the time
• Excellent project management, written and verbal communication, presentation, leadership, teamwork and client service skills, and demonstrated integrity

Required skills

• Significant experience applying technical knowledge in several of: IT general controls, infrastructure and application controls reviews, cybersecurity, digital transformation governance, ERP security (e.g. SAP, Oracle, Workday), cloud security, data protection, IAM/PAM, third-party risk, DevSecOps, and business continuity/disaster recovery
• Leveraging data analytics, automation and AI-enabled audit techniques, and designing continuous auditing and monitoring initiatives
• Ideally: CPA, CA, CISA, CISSP, CISM, CBCP, CRISC, CCSP, CIA, CIPP, CGEIT or similar; non-certified hires must obtain certification within 1 year