Director of IT Audit & Risk Governance

Ministry of Defence of Singapore

Singapore

On-site

SGD 180,000 - 240,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

Ministry of Defence of Singapore seeks a senior IT Auditor to lead a team conducting IT governance, risk, and control audits for MINDEF and SAF. You will assess control environments in IT systems and provide management with analysis, appraisals, and recommendations on reviewed IT systems, while advising on IT security during new system development.

The role requires at least 15 years of IT auditing/security experience, with CISA and preferably advanced certifications; SAP knowledge is a plus.

Qualifications

Education in Computer Science or a related discipline is preferred.
At least 15 years of relevant experience in IT auditing or IT security.
Strong knowledge of hardware, software operating systems, cybersecurity, cloud technology, RPA and AI.
CISA certification is required.
Possession of additional certifications such as CRISC, CSX or CISSP is advantageous.
Knowledge of SAP is advantageous.
Only shortlisted candidates will be notified.

Responsibilities

Plan, direct, organise and manage audits of IT systems and processes.
Establish long-range and short-range audit plans.
Develop and train staff to achieve IT audit professionalism and keep abreast of new technology across various digital platforms.
Determine areas of IT risks and appraise their significance in relation to operational factors of cost, schedule and resources.
Define audit projects according to degree of risk, significance, and frequency of coverage.
Review and approve audit programmes encompassing the purpose, scope, and audit approach for each audit project.
Ensure that audits adhere to established audit standards and objectives.
Review work done by staff to ensure findings are accurate and objective and that recommendations are constructive and practical.
Implement a monitoring and reporting system to ensure proper and adequate follow-up actions are taken by auditees.
Contribute advisory services with regard to the development of new IT policies, systems and processes in MINDEF/SAF to relevant agencies where necessary.