IT Auditor

ACCLIME RISK ADVISORY PTE. LTD.; Singapore; On-site; SGD 70,000 - 100,000; Full time

Job summary

ACCLIME RISK ADVISORY PTE. LTD. is seeking an IT Auditor to conduct IT audits across clients, assess controls, identify technology risks and ensure compliance with applicable standards and internal policies.

The ideal candidate holds a IT-related bachelor's degree, CISA or equivalent certifications, and knowledge of COBIT, ISO/IEC 27001, and NIST. Strong analytical, communication, and reporting skills are essential, with willingness to travel to client premises.

Qualifications

• Bachelor's degree in IT, IS, CS, Cybersecurity or related field.
• Experience in IT audit, technology risk, IT governance, IT compliance, internal audit or similar role preferred.
• CISA certification required or other relevant certifications (CIA, CISM, CISSP, CRISC, ISO/IEC 27001 Lead Auditor) considered.

Responsibilities

• Perform IT audits across multiple clients and industries.
• Assess adequacy and effectiveness of IT controls.
• Prepare audit working papers and reports.
• Discuss audit findings with client personnel and management.
• Follow up on corrective actions and monitor implementation.
• Develop IT audit scopes, programmes and risk assessments.
• Review IT governance, cybersecurity and information security practices against standards.

Skills

IT Audit

IT risk management

Information security

Audit procedures

Analytical thinking

Communication skills

Report writing

Team player

Education

Bachelor's degree in Information Technology / Information Systems / Computer Science / Cybersecurity

Tools

COBIT

ISO/IEC 27001

NIST

Job description

Job Roles and Responsibilities:

The IT Auditor will be responsible for conducting IT audits across multiple clients and industries, assessing the adequacy and effectiveness of IT controls, identifying technology-related risks, and ensuring compliance with applicable standards, regulations and internal policies.

The ideal candidate will have a good understanding of IT systems, information security, business processes and audit procedures. Job responsibilities include:

IT Audit

• Evaluate the effectiveness of clients' IT controls across different industries, business processes, systems and technology environments.
• Conduct IT audits to assess compliance with applicable regulatory requirements, industry standards, internal policies and procedures.
• Identify and assess IT risks and control weaknesses, and recommend appropriate improvements or mitigating measures.
• Assist in developing IT audit scopes, audit programmes, risk assessments and audit procedures.
• Evaluate IT General Controls, application controls and other technology-related controls, and recommend improvements where appropriate.
• Review areas including user access management, change management, IT operations, backup and recovery, system development, cybersecurity, business continuity and third-party IT services, where applicable.
• Assess whether application systems and related controls adequately support business processes and transaction processing.
• Review relevant IT governance, cybersecurity and information security practices against applicable standards and frameworks.
• Perform walkthroughs, interviews, document reviews and control testing to obtain sufficient audit evidence.
• Prepare audit working papers and reports documenting audit procedures performed, findings identified and recommendations for improvement.
• Discuss audit findings and recommendations with client personnel and management.
• Perform follow-up reviews to assess the implementation status of agreed corrective actions.
• Prepare and present reports that reflect audit results and document the proposed process.
• Engage in continuous knowledge development regarding sector’s rules, regulations, best practices, tools, techniques, performance standards, relevant regulations, industry practices, technology risks, emerging technologies and audit methodologies.
• Collaborate with internal audit, cybersecurity and other engagement team members where necessary.
• Perform other ad-hoc duties and assignments as assigned.

Job Requirement:

• Bachelor's degree in Information Technology, Information Systems, Computer Science, Cybersecurity or a related field.
• Qualifications or academic background in Accounting, Auditing or related disciplines would be an added advantage.
• CISA (Certified Information Systems Auditor) certification is a minimum professional certification requirement for candidates who do not possess other relevant professional certifications.
• Candidates possessing other relevant professional certifications such as CIA, CISM, CISSP, CRISC, ISO/IEC 27001 Lead Auditor or equivalent will also be considered.
• Relevant experience in IT audit, technology risk, IT governance, IT compliance, internal audit or a similar role is preferred.
• Prior experience in performing IMDA SSIR audits, Cyber Trust Mark assessments, Cyber Essentials Mark assessments and/or Data Protection Essentials (DPE) assessments would be an added advantage.
• Good knowledge and understanding of IT systems, IT controls, information security and IT risk management.
• Familiarity with IT standards and frameworks such as COBIT, ISO/IEC 27001, NIST or other relevant frameworks.
• Able to appreciate business process issues and understand business transaction scenarios and how application systems support business operations.
• Strong analytical and problem-solving skills.
• Good audit documentation and report-writing skills.
• Excellent communication skills in both oral and written English.
• Resourceful and able to work independently with appropriate supervision.
• Logical thinking, good attitude, fast learner and good team player.
• Able to handle multiple tasks and assignments.
• Able to work under pressure and meet deadlines.
• Willing to travel to client premises where required.