IT Audit Manager

Trident Recruitment Pte. Ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Trident Recruitment Pte. Ltd. assists a Nasdaq-listed technology company headquartered in Singapore to hire an IT Audit Manager. The role is hands-on, testing ITGCs and ITACs and helping shape the IT control framework as the business grows.

Responsibilities include planning and running IT audit engagements end-to-end, testing controls for US SOX, reviewing ERP and cloud controls, and supporting ISO 27001 and SOC 1/2 work with external auditors.

Qualifications

• 4+ years hands-on SOX IT control testing (ITGC and ITAC).
• Experience in-house at a US-listed/large tech company or at a Big 4 on PCAOB audits.
• Fast-paced environment in a lean team.
• Degree in Information Systems, Computer Science, Accounting or related field.

Responsibilities

• Plan and run IT audit engagements end to end: scoping, walkthroughs, testing, findings and reporting.
• Test ITGC and ITAC for US SOX compliance, including access, change, operations and automated controls.
• Help build and improve the SOX IT control framework: design, gap assessment and remediation tracking.
• Test controls over cloud infrastructure (AWS etc.) as the IT cloud business grows.
• Support ISO 27001 and SOC 1 / SOC 2 work alongside the SOX programme.
• Review ERP and database controls, including segregation-of-duties analysis.
• Coordinate with external auditor on reliance testing and evidence requests.
• Present findings clearly to IT owners and senior management, and drive remediation to closure.

Skills

SOX IT control testing

ITGC/ITAC testing

Cloud controls testing

Data analytics

Stakeholder communication

Education

Bachelor’s degree in Information Systems/Computer Science/Accounting

Job description

Role Summary

Our client is a Nasdaq-listed technology company headquartered in Singapore. Its Risk Management function is building out the IT side of internal audit, and is hiring an IT Audit Manager to test and strengthen IT controls across the group's corporate and cloud systems. This is a hands-on role in a small, fast-moving team. You will do the testing yourself, not only review it, and you will help shape how the company's IT control framework grows with the business.

Responsibilities

• Plan and run IT audit engagements end to end: scoping, walkthroughs, control testing, findings and reporting.
• Personally test IT general controls (ITGC) and IT application controls (ITAC) for US SOX compliance, including access management, change management, IT operations and automated controls.
• Help build and improve the company's SOX IT control framework: control design, gap assessment and remediation tracking.
• Test controls over cloud infrastructure (AWS, Alibaba Cloud and similar) as the AI cloud business grows.
• Support ISO 27001 and SOC 1 / SOC 2 work alongside the SOX programme.
• Review ERP and database controls, including segregation-of-duties analysis, using data analytics where it helps.
• Work with the external auditor on reliance testing and evidence requests.
• Present findings clearly to IT owners and senior management, and follow remediation through to closure.

Requirements

• At least 4 years of hands-on SOX IT control testing (ITGC and ITAC).
• This experience gained either in-house at a US-listed or large technology company, or at a Big 4 firm at Manager level or above on PCAOB (US-listed) audits.
• A track record in a fast-paced environment, such as a Big 4 firm, a US-listed company or a large technology company.
• Comfortable with a hands-on, high-intensity workload in a lean team.
• Degree in Information Systems, Computer Science, Accounting or a related field.

Good to have

• Built or ran a SOX IT programme in its first year after a US listing, or led major SOX remediation.
• IT audit or IT compliance experience at a large technology company.
• CISA certification (CISSP, CIA or CRISC also welcome).
• Hands-on testing of cloud controls (AWS, Alibaba Cloud, Azure or GCP).
• ISO 27001 or SOC 1 / SOC 2 experience alongside SOX.
• SAP or Oracle controls and segregation-of-duties reviews.