IT Auditor

Assurity Trusted Solutions Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Learning culture

Annual Leave benefits with family care

Collaborative team environment

Job summary

Assurity Trusted Solutions Pte Ltd is seeking an experienced IT Audit professional to lead risk-based audits across government ICT systems, applications, and infrastructure in Singapore. You will manage end-to-end engagements, coordinate with agencies, and provide actionable remediation recommendations to strengthen governance and security.

The role requires strong cybersecurity knowledge, regulatory awareness, and proven ability to drive audit lifecycle activities from planning through

Qualifications

• At least 6 years of IT audit experience with end-to-end engagements.
• Strong understanding of cybersecurity, risk assessment, and governance.
• Experience with COBIT, ITIL, NIST, ISO/IEC 27001.
• Familiarity with IM8 policies is advantageous.
• Experience with cloud (AWS, Azure, GCC) and SaaS security is advantageous.
• Excellent communication and stakeholder management.
• Possession of professional certifications such as CISA, CISSP, CISM, CRISC is advantageous.

Responsibilities

• Plan, design, and execute policy risk-based audits, process audits, and technical audits of systems, applications, and supporting infrastructure.
• Manage stakeholder engagements with agencies throughout the audit lifecycle to ensure timely delivery of audit plans.
• Review and evaluate audit observations to assess ICT governance, risk management, and control practices across agencies and the Whole-of-Government environment.
• Develop practical, risk-based recommendations and mitigation measures to strengthen ICT governance and security.
• Collaborate with stakeholders to assess issues, identify root causes, and formulate recommendations.
• Monitor and validate corrective actions to ensure remediation of audit findings and root causes.
• Conduct ICT&SS audits of Government agencies as assigned by GovTech’s IAD; perform in-depth reviews.
• Facilitate reporting and maintenance of audit findings in the central audit repository.

Skills

IT audit

Stakeholder management

Risk assessment

Cybersecurity fundamentals

Regulatory compliance

Cloud security

Communication

Education

CISA / CISSP / CISM / CRISC certifications

Job description

Key Responsibilities

• Plan, design, and execute policy risk-based audits, process audits, and technical audits of systems, applications, and supporting infrastructure.
• Manage stakeholder engagements with agencies throughout the audit lifecycle, including audit planning, briefings, fieldwork, management discussions, response reviews, and follow-up activities, to ensure timely and effective delivery of audit plans.
• Review and evaluate audit observations to assess the overall state of ICT governance, risk management, and control practices across agencies and the Whole-of-Government environment.
• Develop practical and risk-based recommendations and mitigation measures to strengthen ICT governance, security, and control effectiveness.
• Collaborate with stakeholders at both operational and management levels to assess issues, identify root causes, and formulate recommendations to address identified gaps.
• Monitor and validate the implementation of corrective actions to ensure audit findings have been effectively remediated and underlying root causes adequately addressed.
• Conduct ICT&SS audits of Government agencies as assigned by GovTech’s Internal Audit Division (IAD). Perform in-depth reviews of Government agencies’ ICT&SS processes, applications, systems, and supporting infrastructure.
• Facilitate the reporting and maintenance of audit findings in the designated central audit repository.

Requirements

• At least 6 years of relevant experience in IT audit, with a proven track record of delivering audit engagements.
• Proven experience leading end-to-end IT audit engagements, including planning, fieldwork, reporting and follow-up.
• Strong understanding of cybersecurity principles, risk assessment, regulatory requirements, threats, vulnerabilities and security governance.
• Experience assessing IT governance, controls and processes against recognised frameworks and standards such as COBIT, ITIL, NIST and ISO/IEC 27001.
• Familiarity with IM8 and/or equivalent ICT governance and security policies would be advantageous.
• Experience in cloud computing (AWS, Azure, GCC), SaaS environments, application security or application development would be advantageous.
• Strong communication, stakeholder management, influencing and project planning skills.
• Possession of professional certifications such as CISA, CISSP, CISM, CRISC or equivalent would be advantageous.

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience.

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: https://www.assurity.sg/privacy.html or such other successor site.

Benefits

• We promote a learning culture and encourage you to grow and learn.
• Annual Leave Benefits with additional perks such as Family Care and Birthday Leave.
• Working in a collaborative environment with helpful team members