Conduct audit activities in accordance with established Internal Audit methodologies and industry standards.
Independently lead and execute audits efficiently, including audit planning, fieldwork, exit meetings, reporting, and issue follow-up to ensure timely closure.
Perform audits of IT infrastructure, cybersecurity frameworks, and application controls to assess compliance with internal policies and regulatory requirements. Provide value-added recommendations to IT Management to mitigate emerging risks and address identified control weaknesses.
Utilize data analytics to evaluate the effectiveness of internal controls and identify potential areas of concern.
Provide advisory support on software development life cycle (SDLC) projects as needed.
Contribute to strategic audit initiatives and projects as outlined in the annual plan.
Job Requirements:
Bachelor's degree in Information Technology, Computer Science, or a related discipline.
Relevant professional certifications such as CISA, CIA, CISM, CISSP, or equivalent are preferred.
Minimum of three years of hands-on experience in IT audit covering information management, digital channels, financial applications, cybersecurity, or IT risk management.
Strong knowledge of regulatory requirements, particularly the MAS Technology Risk Management Guidelines and relevant MAS Notices.
Practical experience in coding, administration, security, or auditing of IT infrastructure, including Windows, Unix, databases, firewalls, network devices, cloud computing, or emerging technologies such as Artificial Intelligence (AI) and Machine Learning (ML).
Exposure to Generative AI, AI agents, no-code automation, data analytics, or scripting is highly advantageous.
Familiarity with business and technology functions within banking, insurance, or securities sectors is a plus.
Strong written and verbal communication skills, with the ability to engage effectively with stakeholders at all levels.
Detail-oriented, disciplined, and self-motivated professional with a passion for excellence.
