Associate/Senior Associate (12 months contract), IT Auditor (AI, Cybersecurity controls)

Temasek Holdings; Singapore; On-site; SGD 67,000 - 100,000; Part time

Job summary

Temasek Holdings seeks an experienced IT Auditor on a 12‑month contract to execute risk-based IT, data, AI, and cybersecurity audits. The role is hands-on, requires independent work, and involves audits across processes, platforms, and security domains.

The candidate will support integrated audits, perform walkthroughs and testing, and document clear audit workpapers. Located in Singapore, the role collaborates with Internal Audit on risk-focused assurance.

Qualifications

• Experience in risk-based IT, data, AI, and cybersecurity audits.
• Ability to work independently with minimal supervision.
• Strong ability to communicate audit findings in business terms.

Responsibilities

• Independently plan and execute risk-based IT, data, AI, and cybersecurity audits across processes, applications, platforms, and infrastructure.
• Support integrated and thematic audits across business, data, technology, and security domains.
• Perform walkthroughs, control design reviews, and operating effectiveness testing.
• Identify control gaps, assess root causes, and evaluate residual and systemic risks.
• Develop clear, defensible audit workpapers in line with standards.

Skills

IT audit

Risk‑based audits

Data governance

AI governance

Cybersecurity controls

Control testing

Independent work

Job description

Select how often (in days) to receive an alert:

Associate/Senior Associate (12 months contract), IT Auditor (AI, Cybersecurity controls)

Location: SG, 238891

Group: Others

Department: Internal Audit

Section: Internal Audit

Job Type: Contract

Temasek is a global investment company headquartered in Singapore, with a net portfolio value of S$518 billion (US$401b, €350b, £304b, RMB2.77t) as at 31 March 2026. Our Purpose “So Every Generation Prospers” guides us to make a difference for today’s and future generations. We seek to build a resilient and forward-looking portfolio that will deliver good sustainable returns over the long term.

We have 13 offices in 9 countries around the world: Beijing, Hanoi, Mumbai, Shanghai, Shenzhen, and Singapore in Asia; and Brussels, London, Mexico City, New York, Paris, San Francisco, and Washington, DC outside Asia.

For more information on Temasek, please visit www.temasek.com.sg

For Temasek Review 2026, please visit www.temasekreview.com.sg

For Sustainability Report 2026, please visit www.temasek.com.sg/SR2026

Role Purpose: We are seeking an experienced IT Auditor on a contract basis to support the execution of risk-based technology, data, AI, and cybersecurity audits. The role is hands‑on, execution‑focused, and suited to a candidate who can work independently with minimal supervision.

Scope of Role: Audit assignments will vary depending on the annual audit plan and emerging risk priorities, and may include personal data protection, data governance and security, AI governance and security, application security, infrastructure, and network security.

Responsibilities

Audit Execution and Assurance

• Independently plan and execute risk‑based IT, data, AI, and cybersecurity auditsacross business processes, applications, platforms, and infrastructure.
• Support integrated and thematic auditsthat cut across business, data, technology, and security domains.
• Perform walkthroughs, control design reviews, and operating effectiveness testing.
• Identify control gaps, assess root causes, and evaluate residual and systemic risks.
• Develop clear, defensible audit workpapersin line with internal audit standards and professional practices.

Technology, Data and Security Risk Coverage

The role may include assessing controls and risks across the following areas:

• Personal Data & Privacy
  • Data lifecycle management (collection, use, disclosure, retention, disposal)
  • Data protection impact assessments (DPIAs)
  • Access controls, encryption, logging, and monitoring
• Data Governance & Security
  • Data governance and accountability frameworks
  • Data classification and secure handling
  • Data access governance across platforms
  • Data quality, lineage, and integrity
  • Data leakage prevention and monitoring
  • GenAI data governance, including training data controls and usage safeguards
• AI Governance & Application Security
  • AI governance, oversight, and use‑case lifecycle management
  • Security and technology risk controls over AI and GenAI systems
  • AI application security testing, including:
    • Review of model access controls, APIs, and integrations
    • Identification of risks such as prompt injection, data leakage, insecure model access, and third‑party dependency risks
  • Alignment with secure SDLC practices, architectural guardrails, and third‑party AI governance
• Infrastructure, Network & External Exposure Security
  • Network and wireless security
  • Host configuration, hardening, and patch management
  • Firewalls, segmentation, and security monitoring
  • Security reviews of corporate websites and externally exposed services

Reporting and Stakeholder Engagement

• Produce concise, management‑ready audit reportswith practical, risk‑focused recommendations.
• Communicate complex technology, data, and AI risks in clear business terms.
• Work effectively with IT,