Consultant, IT Security (IT Audit)

NCS Group; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

NCS Group in Singapore is recruiting a detail-oriented Consultant, IT Security (IT Audit) to strengthen our security and audit practice. You will conduct comprehensive IT security audits, evaluate control environments, and provide expert recommendations to ensure regulatory compliance.

You’ll collaborate with IT and business stakeholders to identify risks and drive continuous improvement in security and audit processes.

Qualifications

• 3+ years of experience in information security governance, risk management, or audit.
• Singapore Government project experience is advantageous.
• IT Audit certifications such as CISA, CISSP, CISM and ISO27001 Lead Auditor are desirable.
• Due to project sensitivity, Singapore Citizens will be considered only.

Responsibilities

• Plan and conduct independent IT process audits on applications and infrastructure with client approval.
• Track remediation status and report to closure.
• Brief project teams quarterly on policies and observations to enhance compliance.
• Provide consultation on standards, policies, directives.
• Advise and QA responses, evidence, remediation plans to auditors during external audits.
• Propose improvements to audit processes and compliance readiness.

Skills

Team player

Interpersonal skills

Communication skills

Education

Bachelor’s degree or higher in Cybersecurity, Computer Science, Engineering, Information Systems or equivalent

Job description

Job Description

We're looking for a detail-oriented and analytical Consultant, IT Security (IT Audit) to join our organization in Singapore. In this role, you will be responsible for conducting comprehensive IT security audits, evaluating control environments, and providing expert recommendations to strengthen our organization's security posture and ensure compliance with regulatory requirements. You will work closely with IT and business stakeholders to identify risks, assess vulnerabilities, and drive continuous improvement in our security and audit practices.

• Plan and conduct Independent Reviews (IT process audits) on selected Applications/ Infrastructure with approval from Client to undercover gaps, improvement areas with the inclusion of tracking & reporting of remediation status to closure.
• Conduct quarterly briefing sessions to project teams on frequently used policies/ directives and common observations/improvement area from audits to enhance compliance and create awareness.
• Provide consultation to project teams on queries related to standards/ policies/ directives.
• Provide advisory and QA to project teams and stakeholders on their responses, evidence, remediation plan to auditors or compliance related declarations during external audit exercise.
• Propose and implement improvement initiatives to enhance audit processes and compliance readiness
• Develop materials and tools for delivery of consultancy services (e.g. workpapers, report templates).

Job Description

We're looking for a detail-oriented and analytical Consultant, IT Security (IT Audit) to join our organization in Singapore. In this role, you will be responsible for conducting comprehensive IT security audits, evaluating control environments, and providing expert recommendations to strengthen our organization's security posture and ensure compliance with regulatory requirements. You will work closely with IT and business stakeholders to identify risks, assess vulnerabilities, and drive continuous improvement in our security and audit practices.

• Plan and conduct Independent Reviews (IT process audits) on selected Applications/ Infrastructure with approval from Client to undercover gaps, improvement areas with the inclusion of tracking & reporting of remediation status to closure.
• Conduct quarterly briefing sessions to project teams on frequently used policies/ directives and common observations/improvement area from audits to enhance compliance and create awareness.
• Provide consultation to project teams on queries related to standards/ policies/ directives.
• Provide advisory and QA to project teams and stakeholders on their responses, evidence, remediation plan to auditors or compliance related declarations during external audit exercise.
• Propose and implement improvement initiatives to enhance audit processes and compliance readiness
• Develop materials and tools for delivery of consultancy services (e.g. workpapers, report templates).

Qualifications

• Degree or higher in Cybersecurity, Computer Science, Engineering, Information Systems or equivalent
• Minimum of 3 years working in areas of information security governance, risk management, or audit; experience in other areas of cybersecurity will be considered
• Experience in Singapore based Government projects will have an added advantage
• IT Audit certifications such as CISA, CISSP, CISM and ISO27001 Lead Auditor are highly desirable.
• Team player with interpersonal skills
• Highly motivated individual with a positive “can-do” attitude, creative with excellent oral and written communication skills.
• Due to project sensitivity, we will only consider Singapore Citizen

Additional Information

We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.