Vice President, Technology Auditor (Enterprise Process), Group Audit

About the role

The Group Audit team at DBS provides independent assurance on the Group's governance, risk management and control processes, and its Technology Audit team acts as trusted advisors on technology risk and controls. This is a full-time, regular schedule Vice President position in Enterprise Process, based in DBS Asia Central, looking for an experienced, independent technology risk professional to evaluate complex technology environments and challenge architecture and control decisions.

Key responsibilities

• Lead and execute end-to-end technology audits covering resilient architecture, infrastructure, IT service management and technology risk governance.
• Assess resilient architecture patterns (active-active, active-passive, availability zones, failover, recovery, capacity management) and architecture governance (standards, design reviews, risk assessments, residual risk approvals).
• Review technology risk management practices overseen by Line 2, including risk identification, control assessment, KRI, thematic reviews and independent challenge of risk decisions.
• Lead audits and thematic reviews on production change governance, deployment, configuration and asset management, end-of-support risk, incident management and operational resilience.
• Perform incident back-testing and assess whether risks and control weaknesses are escalated and reported to senior management and governance committees in a timely way.
• Evaluate the design and operating effectiveness of controls across on-premises infrastructure, cloud, containers, middleware, databases, networks and third-party services.
• Develop risk-based audit strategies, communicate complex risks clearly to senior stakeholders and produce high-quality audit reports.
• Use data analytics, automation and continuous monitoring to improve audit coverage, and coach and guide junior auditors.

Required profile

• Degree in computer science, information systems, cybersecurity, auditing or a related discipline.
• Minimum 10 years of relevant experience in technology audit, technology risk management, resilient architecture, engineering, infrastructure operations or a related field.
• Significant experience in at least one independent assurance or oversight role (Internal Audit, Technology Risk Management, Operational Risk, regulatory assessment or external assurance).
• Strong knowledge of resilient architecture and the ability to challenge designs on availability, recoverability and resilience.
• Proven experience of independent technology risk assessments, architecture reviews and thematic reviews with practical recommendations.
• Strong understanding of first-, second- and third-line roles and accountabilities, and of Singapore's technology regulatory landscape, including the MAS Technology Risk Management Guidelines, MAS Notices, Cyber Hygiene and third-party risk expectations.
• Ability to work independently, manage multiple priorities and lead complex audit assignments across technology domains and locations.

Required skills

• Resilient software and infrastructure architecture, including redundancy, automated failover, fault isolation and recovery design.
• IT service management, technology asset management and third-party technology risk.
• Good to have: secure architecture, DevSecOps vulnerability assessment, cloud-native technologies, virtualisation, API architecture and microservices.
• Certifications such as CISA, CISSP or CRISC are advantageous.