Information Technology Auditor

Acclime; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Acclime in Singapore seeks an IT Auditor to conduct audits across clients and industries, assess IT controls, and identify technology risks to ensure compliance with standards and internal policies.

The ideal candidate has strong knowledge of IT systems, information security, governance and audit procedures, with hands-on experience in control testing, evidence collection and reporting. You will collaborate with client teams and travel to premises as required.

Qualifications

• Bachelor in IT or related field.
• Knowledge of IT controls, information security, risk management.
• CISA or equivalent certification preferred.

Responsibilities

• Evaluate IT controls across diverse environments and industries.
• Assess compliance with regulatory requirements and internal policies.
• Identify IT risks and recommend improvements.
• Develop IT audit scopes, programs, and procedures.
• Perform walkthroughs, testing, and evidence collection.
• Prepare working papers and audit reports with findings.

Skills

IT Audit

Risk Assessment

Controls Testing

Information Security

Auditing Standards

Education

Bachelor in IT

Tools

COBIT

ISO 27001

NIST

Job description

The IT Auditor will be responsible for conducting IT audits across multiple clients and industries, assessing the adequacy and effectiveness of IT controls, identifying technology-related risks, and ensuring compliance with applicable standards, regulations and internal policies.

The ideal candidate will have a good understanding of IT systems, information security, business processes and audit procedures. Job responsibilities include:

IT Audit

• Evaluate the effectiveness of clients' IT controls across different industries, business processes, systems and technology environments.
• Conduct IT audits to assess compliance with applicable regulatory requirements, industry standards, internal policies and procedures.
• Identify and assess IT risks and control weaknesses, and recommend appropriate improvements or mitigating measures.
• Assist in developing IT audit scopes, audit programmes, risk assessments and audit procedures.
• Evaluate IT General Controls, application controls and other technology-related controls, and recommend improvements where appropriate.
• Review areas including user access management, change management, IT operations, backup and recovery, system development, cybersecurity, business continuity and third-party IT services, where applicable.
• Assess whether application systems and related controls adequately support business processes and transaction processing.
• Review relevant IT governance, cybersecurity and information security practices against applicable standards and frameworks.
• Perform walkthroughs, interviews, document reviews and control testing to obtain sufficient audit evidence.
• Prepare audit working papers and reports documenting audit procedures performed, findings identified and recommendations for improvement.
• Discuss audit findings and recommendations with client personnel and management.
• Perform follow-up reviews to assess the implementation status of agreed corrective actions.
• Prepare and present reports that reflect audit results and document the proposed process.
• Engage in continuous knowledge development regarding sector’s rules, regulations, best practices, tools, techniques, performance standards, relevant regulations, industry practices, technology risks, emerging technologies and audit methodologies.
• Collaborate with internal audit, cybersecurity and other engagement team members where necessary.
• Perform other ad-hoc duties and assignments as assigned.

Job Requirement:

• Bachelor's degree in Information Technology, Information Systems, Computer Science, Cybersecurity or a related field.
• Qualifications or academic background in Accounting, Auditing or related disciplines would be an added advantage.
• CISA (Certified Information Systems Auditor) certification is a minimum professional certification requirement for candidates who do not possess other relevant professional certifications.
• Candidates possessing other relevant professional certifications such as CIA, CISM, CISSP, CRISC, ISO/IEC 27001 Lead Auditor or equivalent will also be considered.
• Relevant experience in IT audit, technology risk, IT governance, IT compliance, internal audit or a similar role is preferred.
• Prior experience in performing IMDA SSIR audits, Cyber Trust Mark assessments, Cyber Essentials Mark assessments and/or Data Protection Essentials (DPE) assessments would be an added advantage.
• Good knowledge and understanding of IT systems, IT controls, information security and IT risk management.
• Familiarity with IT standards and frameworks such as COBIT, ISO/IEC 27001, NIST or other relevant frameworks.
• Able to appreciate business process issues and understand business transaction scenarios and how application systems support business operations.
• Strong analytical and problem-solving skills.
• Good audit documentation and report-writing skills.
• Excellent communication skills in both oral and written English.
• Resourceful and able to work independently with appropriate supervision.
• Logical thinking, good attitude, fast learner and good team player.
• Able to handle multiple tasks and assignments.
• Able to work under pressure and meet deadlines.\
• Willing to travel to client premises where required.