Lead and oversee the IT audit function, defining audit strategy, annual audit plans, and priorities aligned with enterprise risk objectives
Provide independent assurance over IT governance, risk management, and internal control frameworks across the organization
Direct complex audits across systems, applications, infrastructure, and emerging technology domains, ensuring robust evaluation of controls
Establish and enhance audit methodologies, frameworks, and standards in line with best practices and regulatory expectations (e.g. ISO 27001, SOX, MAS TRM, NIST)
Identify key technology risks and control gaps, providing strategic and actionable recommendations to senior leadership
Oversee audits in critical areas including cybersecurity, cloud environments, data governance, and third-party/vendor risk
Partner closely with senior stakeholders across technology, risk, and business functions to drive risk awareness and strengthen control environments
Present audit findings, insights, and risk themes to executive leadership and audit committees
Monitor remediation progress and ensure timely closure of audit findings, escalating where necessary
Build, lead, and mentor a high-performing IT audit team, fostering a culture of accountability, continuous improvement, and professional development
Requirements
10+ years of experience in IT audit, technology risk, or related domains, with proven leadership experience
Strong expertise in IT risk and control frameworks, audit methodologies, and regulatory environments
Deep familiarity with standards such as SOX, ISO 27001, NIST, and MAS TRM
Broad exposure across cybersecurity, cloud platforms (AWS, Azure, GCP), data governance, and enterprise applications
Proven track record of engaging with senior stakeholders and influencing decision-making at the executive level
Professional certifications such as CISA, CISSP, or CISM strongly preferred
Strong leadership, communication, and stakeholder management skills
Ability to operate strategically while maintaining attention to detail in a dynamic, fast-paced environment
