Head of Internal Audit, Strategy & Planning

Cyber Security Agency of Singapore (CSA); Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

The Cyber Security Agency of Singapore (CSA) is seeking a seasoned internal audit leader to establish and head CSA's Internal Audit function. You will provide independent assurance and strategic advice to governance bodies, drive risk-based planning, and oversee audits across operations, finance and compliance.

You will collaborate with GovTech and specialist assurance providers on technology and cybersecurity audits, guiding transformation and innovation within the IA function.

Qualifications

• At least 10 years of internal or external auditing experience with leadership experience.
• Professional certifications such as CIA, CPA, or equivalent.
• Strong knowledge of Global Internal Audit Standards (GIAS) and internal control frameworks.
• Experience using data analytics and digital tools in audit work.
• Good appreciation of technology and cybersecurity risks and controls, with the ability to engage IT auditors.

Responsibilities

• Establish and lead CSA's Internal Audit function in line with GIAs and public sector requirements.
• Develop Internal Audit strategy, operating model and risk-based Annual Audit Plan.
• Lead operational, financial and compliance audits and advisory engagements.
• Coordinate technology and cybersecurity assurance with GovTech and other providers.
• Drive transformation using digital tools, data analytics and continuous auditing.

Skills

Leadership

Audit expertise

Data analytics

Cybersecurity awareness

Governance

Education

CIA/CPA certification

Tools

GIAS knowledge

Audit tools

Job description

The Cyber Security Agency of Singapore (CSA) is seeking an experienced internal audit professional to establish and lead its Internal Audit function. As Head of Internal Audit, you will provide independent and objective assurance and advice to support good governance, effective risk management and internal controls, and the achievement of CSA's strategic objectives. You will lead a team responsible primarily for operational, financial and compliance audits, while working with GovTech and other specialist assurance providers on technology and cybersecurity audits. The role provides an opportunity for an experienced audit professional to take on the leadership of an agency Internal Audit function, engage senior management and the Audit Committee, and contribute to the continued development and transformation of internal audit practices across the Ministry family.

1) Establish and Lead the Internal Audit Function

Establish and lead CSA's Internal Audit function in accordance with the Global Internal Audit Standards (GIAS) and relevant public sector requirements. Develop and implement Internal Audit's strategy, operating model, and risk-based Annual Audit Plan, taking into account CSA's strategic objectives, key and emerging risks and stakeholder expectations. Provide independent and objective insights to senior management and the Audit Committee on significant governance, risk management and internal control matters. Maintain the independence and objectivity of Internal Audit and appropriate access to senior management and the Audit Committee.

2) Strengthen Governance, Risk Management and Internal Controls

Lead and oversee operational, financial and compliance audits, periodic reviews and advisory engagements across CSA. Assess the adequacy and effectiveness of governance, risk management and internal controls, and develop practical recommendations that address the underlying risks and root causes identified. Review the effectiveness of whistleblowing arrangements and lead or support investigations into significant incidents, allegations or control concerns, where requested by senior management or the Audit Committee.

3) Coordinate Technology and Cybersecurity Assurance

Maintain a good appreciation of technology, cybersecurity, data and other emerging digital risks relevant to CSA's operating environment. Work closely with GovTech and other specialist assurance providers on technology and cybersecurity audits, including providing relevant business and risk context and understanding the implications of audit results for CSA. Consider technology and cybersecurity assurance results as part of Internal Audit's overall assessment of CSA's governance, risk and control environment, and identify potential assurance gaps where appropriate.

4) Drive Transformation and Champion Innovation

Collaborate closely with the Ministry Group Chief Internal Auditor (GCIA) to strengthen internal audit processes and support conformance with the Global Internal Audit Standards (GIAS). Champion the adoption of digital tools, data analytics, and continuous auditing methodologies within CSA Internal Audit to enhance audit effectiveness and efficiency. Establish and lead CSA Internal Audit transformation initiatives in alignment with GCIA frameworks and Ministry-wide initiatives.

5) Team Leadership and Development

Build, lead, and develop a high-performing IA team with strong business audit, analytical, stakeholder management and data analytics capabilities. Mentor and coach IA officers in modern audit methodologies and facilitate professional development opportunities. Foster a culture of continuous learning and adaptation to emerging audit practices in alignment with GCIA transformation goals.

Key Qualifications

• At least 10 years of internal or external auditing experience, with experience in a leadership capacity.
• Professional certifications such as Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or equivalent.
• Strong knowledge of Global Internal Audit Standards (GIAS) and internal control frameworks.
• Experience using data analytics and digital tools in audit work.
• Good appreciation of technology and cybersecurity risks and controls, with the ability to engage effectively with specialist IT auditors and technology stakeholders.
• Past working experience in a government agency or technology organization would be useful.
• Proven track record of managing audits, leading teams, developing audit strategies and applying risk-based audit approaches.
• Experience collaborating with central audit functions and implementing standardized audit practices.

Desirable Qualifications

• Experience in transforming and modernising audit practices.
• Experience transforming or significantly enhancing an internal audit function or audit capability would be an advantage.
• Knowledge of audit automation tools and data visualisation tools.

Key Competencies

• Ability to operate independently, exercise sound judgement and build trusted relationships