IT Auditor (Global - Governance, Risk & Compliance)

AGES Systems Gelderfarenit Pte Ltd; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

AGES Systems Gelderfarenit Pte Ltd is seeking a Senior IT Auditor to plan and conduct attestation-based audits under the PCI SSC framework for our global client base. The role emphasizes evaluating both logical and physical security controls across payments ecosystems.

You will prepare detailed audit reports, work with stakeholders on remediation, and help develop governance and cybersecurity policies. Willingness to travel abroad for engagements is essential.

Qualifications

• Minimum 3–5 years of IT-related experience.
• Strong analytical, written and verbal communication skills.
• Ability to travel abroad frequently for audits.

Responsibilities

• Plan and execute attestation-based audits against PCI SSC frameworks.
• Audit logical security: data prep, PIN generation, cryptographic keys, and chip provisioning.
• Audit physical security: card manufacturing, chip embedding, secure storage, fulfilment and mailing.
• Support CSA Cyber Essentials Mark and Cyber Trust Mark readiness.
• Prepare audit reports with findings, evidence and remediation recommendations.
• Follow up with stakeholders to verify remediation completion.
• Develop governance frameworks, cybersecurity policies and training programs.

Skills

Advanced analytical skills

Written and verbal communication

Travel readiness

Audit mindset

Education

Bachelor’s degree or Diploma in a relevant field

CISA certification or pursuing

3–5 years IT-related experience

Job description

Company Overview

Founded in the Year 2004, AGES possesses extensive experience collaborating with prominent payment brands such as MasterCard International, Visa International, American Express Company, and UnionPay International on compliance assessments. Our team possesses the expertise and experience to guide our clientele through the necessary compliance assessments to align with regulatory requirements.

We offer comprehensive audit services, including Payment Card Industry (PCI) Card Production and Provisioning (CP), PCI Data Security Scheme (DSS), PCI 3D Secure (3DS), PCI P2PE / Token Service Provider(TSP), SWIFT Customer Security Program (CSP), ISO security programs, and other relevant standards.

Role

As our senior IT Auditor, you will plan, execute attestation-based audits against the Payment Cards Industry Security Standards Council (PCI SSC) framework across our portfolio of clients globally. This is a specialized framework and certification overseen by the PCI Council to validate the physical and logical creation of payment cards.

Responsibilities

• Conduct Logical Security: Auditing data preparation, PIN generation, cryptographic keys, and chip personalization/provisioning.
• Conduct Physical Security: Auditing plastic card manufacturing, chip embedding, secure storage, fulfilment, and transport mailing
• Support CSA Cyber Essentials Mark, and Cyber Trust Mark readiness and implementation engagements.
• Prepare detailed audit reports documenting findings, evidence, and recommendations for remediation actions.
• Follow up with stakeholders to verify implementation of corrective measures and completion of remediation.
• Develop governance frameworks, cybersecurity policies, security policies and security training programs.

Required Competency

• A good Bachelor’s degree or recognised Diploma in a relevant field.
• Possess the Certified Information Systems Auditor (CISA) certification or currently pursuing the examination.
• Possess a minimum 3 to 5 years of working experience in any information technology related field.
• Possess advanced analytical skills to interpret technical data, identify patterns, and draw evidence-based conclusions.
• Strong written and verbal communication skills to document and present audit findings effectively.
• Able to travel abroad frequently to conduct audits.

Commitment

• Weekly to Bi-weekly overseas traveling is required.
• A training bond will be signed for the external industry-related courses, certifications and overseas training provided for you.