IT Audit & Controls Specialist

ACCLIME RISK ADVISORY PTE. LTD.; Santo Niño 1st; On-site; PHP 600,000 - 900,000; Full time

Job summary

ACCLIME RISK ADVISORY PTE. LTD. is seeking an IT Auditor to conduct IT audits across multiple clients and industries, assessing IT controls and technology risks to ensure regulatory and policy compliance.

The role covers evaluating general and application controls, IT governance, cybersecurity practices, and conducting walkthroughs, documentation, and reports. Travel to client premises may be required.

Qualifications

• Bachelor's degree in Information Technology, Information Systems, Computer Science, Cybersecurity or a related field.
• Qualifications or academic background in Accounting, Auditing or related disciplines would be an added advantage.
• CISA (Certified Information Systems Auditor) certification is a minimum professional certification requirement for candidates who do not possess other relevant professional certifications.
• Candidates possessing other relevant professional certifications such as CIA, CISM, CISSP, CRISC, ISO/IEC 27001 Lead Auditor or equivalent will also be considered.
• Relevant experience in IT audit, technology risk, IT governance, IT compliance, internal audit or a similar role is preferred.
• Prior experience in performing IMDA SSIR audits, Cyber Trust Mark assessments, Cyber Essentials Mark assessments and/or Data Protection Essentials (DPE) assessments would be an added advantage.
• Good knowledge and understanding of IT systems, IT controls, information security and IT risk management.
• Familiarity with IT standards and frameworks such as COBIT, ISO/IEC 27001, NIST or other relevant frameworks.
• Able to appreciate business process issues and understand business transaction scenarios and how application systems support business operations.
• Strong analytical and problem-solving skills.
• Good audit documentation and report-writing skills.
• Excellent communication skills in both oral and written English.
• Resourceful and able to work independently with appropriate supervision.
• Logical thinking, good attitude, fast learner and good team player.
• Able to handle multiple tasks and assignments.
• Able to work under pressure and meet deadlines.
• Willing to travel to client premises where required.

Responsibilities

• Evaluate the effectiveness of clients' IT controls across different industries, business processes, systems and technology environments.
• Conduct IT audits to assess compliance with applicable regulatory requirements, industry standards, internal policies and procedures.
• Identify and assess IT risks and control weaknesses, and recommend appropriate improvements or mitigating measures.
• Assist in developing IT audit scopes, audit programmes, risk assessments and audit procedures.
• Evaluate IT General Controls, application controls and other technology-related controls, and recommend improvements where appropriate.
• Review areas including user access management, change management, IT operations, backup and recovery, system development, cybersecurity, business continuity and third-party IT services, where applicable.
• Assess whether application systems and related controls adequately support business processes and transaction processing.
• Review relevant IT governance, cybersecurity and information security practices against applicable standards and frameworks.
• Perform walkthroughs, interviews, document reviews and control testing to obtain sufficient audit evidence.
• Prepare audit working papers and reports documenting audit procedures performed, findings identified and recommendations for improvement.
• Discuss audit findings and recommendations with client personnel and management.
• Perform follow-up reviews to assess the implementation status of agreed corrective actions.
• Prepare and present reports that reflect audit results and document the proposed process.
• Engage in continuous knowledge development regarding sector’s rules, regulations, best practices, tools, techniques, performance standards, relevant regulations, industry practices, technology risks, emerging technologies and audit methodologies.
• Collaborate with internal audit, cybersecurity and other engagement team members where necessary.
• Perform other ad-hoc duties and assignments as assigned.

Skills

Analytical thinking

Problem solving

Communication skills

Independent worker

Team player

Time management

Education

Bachelor's degree in IT/IS/CS/Cybersecurity

Accounting/Auditing background (advantage)

Tools

COBIT

ISO/IEC 27001

NIST

IT risk and governance frameworks

Job description

ACCLIME RISK ADVISORY PTE. LTD. is seeking an IT Auditor to conduct IT audits across multiple clients and industries, assessing IT controls and technology risks to ensure regulatory and policy compliance.

The role covers evaluating general and application controls, IT governance, cybersecurity practices, and conducting walkthroughs, documentation, and reports. Travel to client premises may be required.