Assistant Vice President, IT Audit

HFG Insurance Recruitment; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

The Group Internal Audit function seeks an experienced IT Audit professional to lead end-to-end IT audit engagements across technology risk, cybersecurity, and internal controls in a regional financial services setting.

You will assess IT governance, infrastructure, applications, and controls, identify risk gaps, and provide practical recommendations. Travel up to 10% to regional markets may be required.

Qualifications

• 8–10 years of IT Audit experience across infrastructure, applications, cybersecurity and technology risk audits.
• Degree in Computer Science, Information Technology or a related discipline.
• Professional certifications such as CISA, CISM, CRISC, CISSP or CCSP are advantageous.

Responsibilities

• Lead and execute end-to-end IT audit engagements including planning, scoping, fieldwork, reporting and follow-up.
• Support annual IT audit planning by assessing technology risks and regulatory developments.
• Evaluate IT governance, infrastructure, applications, cybersecurity and controls for design and operating effectiveness.
• Identify control weaknesses and provide practical recommendations to strengthen risk management.
• Deliver IT audit expertise for integrated and business-process audits with technology controls at the core.
• Conduct ad-hoc reviews, investigations, continuous monitoring and targeted assessments.
• Build relationships with senior stakeholders and technology teams, communicating observations and improvements.
• Monitor remediation of audit findings to ensure timely closure and audit quality.

Skills

IT Audit

Infrastructure audits

Cybersecurity audits

Technology risk

Stakeholder management

Education

Degree in Computer Science / Information Technology

Job description

We are seeking an experienced IT Audit professional to join the Group Internal Audit function of a leading regional financial services organisation. The role will provide independent and objective assurance over IT governance, technology risk, cybersecurity, and internal controls across the Group.

The successful candidate will lead end-to-end IT audit engagements and provide insights and recommendations to strengthen the organisation’s technology risk management and overall control environment.

Key Responsibilities

• Lead and execute end-to-end IT audit engagements, including audit planning, scoping, fieldwork, control assessment, reporting, and follow-up activities.
• Support the development and enhancement of the annual IT audit plan by assessing emerging technology risks, regulatory developments, business priorities, and changes in the technology landscape.
• Evaluate IT governance, infrastructure, applications, cybersecurity, and technology controls to assess their design, operating effectiveness, and alignment with internal policies and regulatory expectations.
• Identify control weaknesses and risk gaps, providing practical and value-added recommendations to improve control design, effectiveness, and overall risk management.
• Provide IT audit expertise for integrated, thematic, and business process audits, particularly where technology controls underpin key business processes.
• Conduct ad-hoc reviews, investigations, continuous monitoring, and targeted assessments in response to emerging technology risks or management requirements.
• Build effective relationships with senior stakeholders and technology teams, communicating audit observations and influencing improvements in risk and control practices.
• Monitor and validate the timely remediation of audit findings, ensuring issues are appropriately addressed and audit quality standards are maintained.

Requirements

• 8–10 years of relevant IT Audit experience, with strong exposure to infrastructure, application, cybersecurity, and technology risk audits.
• Degree in Computer Science, Information Technology, or a related discipline.
• Professional certifications such as CISA, CISM, CRISC, CISSP, or CCSP are highly advantageous.
• Previous experience within the banking, insurance, or broader financial services sector.
• Good understanding of technology risk management, IT governance, cybersecurity, and regulatory requirements across Singapore, Malaysia, and/or Indonesia.
• Strong understanding of IT control frameworks, risk assessment, audit methodologies, and regulatory expectations.
• Demonstrated ability to lead audit engagements and guide or mentor other auditors.
• Strong report writing, presentation, communication, and stakeholder management skills.
• High level of attention to detail with the ability to independently manage multiple audit assignments and deliver quality outcomes within agreed timelines.
• Strong integrity, accountability, independence, and professional judgement.
• Comfortable engaging with stakeholders across different levels of seniority and functions.
• Willingness to travel regionally when required, with travel expected to be approximately 10%.

What You Can Expect

• Opportunity to work within a regional Group Internal Audit function.
• Exposure to a broad technology environment covering infrastructure, applications, cybersecurity, IT governance, and emerging technology risks.
• Regional exposure across multiple markets and business operations.
• Opportunity to engage with senior technology and business stakeholders and contribute to strengthening enterprise-wide technology risk management.
• A role that combines hands-on IT audit delivery, stakeholder engagement, risk advisory, and leadership responsibilities.