IT Auditor, IG Hub APAC

BNP Paribas.; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

A global financial services leader in Singapore is seeking a Senior IT Auditor. The role involves auditing assignments, evaluating risks, and ensuring compliance with financial service regulations. Candidates must have strong expertise in Cybersecurity and a minimum of 10 years in auditing or IT, ideally in financial services. Professional certifications such as CISA or CISSP are an advantage. This position offers a collaborative environment and opportunities for professional growth.

Benefits

Diversity and inclusion initiatives

Comprehensive professional development opportunities

Qualifications

• Minimum of 10 years of experience in auditing or IT in financial services.
• Possession of professional qualifications like CISA, CISSP, CISM, CCSP is a plus.

Responsibilities

• Participate in audit team assignments and special reviews.
• Review the implementation of recommendations from internal audits.
• Contribute to the periodic risk assessment of IT activities.

Skills

Strong expertise in Cybersecurity

Outstanding analytical skills

Excellent writing and presentation skills

Ability to work effectively under pressure

Strong technical background in IT activities

Education

Bachelor's / Master's Degree in Information Technology

Job description

As the leading European Union bank, and one of the world's largest financial institutions with an uninterrupted presence in the region since 1860, BNP Paribas offers a wide range of financial services for corporate, institutional and private investors spanning corporate and institutional banking, wealth management, asset management and insurance.

BNP is committed to financing a carbon‑neutral economy by 2050. The Group is a founding member of the Net‑Zero Banking Alliance and has set up its own Low Carbon Transition Group to support its clients through their energy transitions.

We passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued and encourage applicants of all backgrounds, including diversity of origin, age, gender, sexual orientation, gender identity, religion and those living with a disability. We have a number of internal employee networks in place to empower our staff to act and challenge the status quo.

• BNP Paribas PRIDE is highly active in favour of the LGBTQIA+ community
• BNP Paribas MixCity which fosters better representation of women at all levels of the organization
• Ability, the mutual aid network for employees with a disability or a disabling or chronic illness
• BNP Paribas CulturAll which celebrates diverse backgrounds

BNPP has won Top Employer Europe award in a 10th consecutive year.

Direct Responsibilities

1. Participate in the audit team assignments and special reviews (when required by regulators, business lines, or senior management).
   1. Contribute to the planning and preparation of the assignment e.g. understanding the methodology to be applied, acquiring a deep knowledge of the activities to be covered, understanding the detailed technologies, gathering relevant key figures, etc.
   2. Develop a thorough understanding of the activities within the scope of the assignment, its strategy and governance, and the related risks.
   3. Evaluate the overall setup and identify the main areas of risk (including a comprehensive assessment of the management actions).
   4. Execute detailed investigations leveraging on a strong technical knowledge in various IT systems (Databases, Operating systems Linux/Windows, Cybersecurity/Network security, Virtualization, containerization, Cloud Computing and related risks).
   5. Leverage on adequate programming languages and scripting to perform efficient investigations by automating analysis.
   6. Ensure the adequate learning and understanding of the standard IT solutions used in the IT infrastructure and production, Cybersecurity management in order to analyze adequately their configuration and be able to identify and raise potential risks.
   7. Recommend appropriate actions to the management in order to remediate the identified weaknesses.
   8. Formalize the results of the assignment investigations and contribute to the production of the assignment deliverables.
   9. Present the conclusions of the assignment fieldwork to the senior management.
2. Review the implementation of the Inspection Générale recommendations.
   1. Review and challenge the actions defined to remediate the weaknesses identified by the audit team through its assignments.
   2. Ensure the adequacy of the answers to address permanently the gaps following accurately the recommended actions.
   3. Perform relevant control testing to ensure the proper implementation of the actions.
3. Contribute to the periodic risk assessment of IT activities and planning.
   1. Perform a periodic and comprehensive risk assessment of the IT activities as per the Group guidelines.
   2. Keep abreast of change/new development of regulatory requirements that are relevant to IT activities and related functions.
   3. Assist in the elaboration of the IT audit planning following a risk‑based approach.

Contributing Responsibilities

• Contribute to the improvement of the Inspection Générale practices through the elaboration and update of our methodologies.

Travelling requirement

Below 30%

Technical and Behavioral Competencies required

• Strong expertise in Cybersecurity. (IT security hands‑on experience is a plus)
• Strong technical background in IT activities (including IT production / IT systems expertise)
• Curiosity, rigor and precision
• Outstanding analytical skills
• Ability to synthesize
• Excellent writing and presentation skills
• High level of initiative, commitment and drive
• Ability to work effectively under pressure and within short deadlines
• Promotes a constructive, cooperative and participative teamwork environment

Specific Qualifications (if required)

• Possess a Bachelor's / Master's Degree in Information Technology/ Management Information System / Computer Science and related discipline
• Not less than 10 years of experience in external auditing / internal auditing / IT / risk / compliance / internal control / operations in the financial services industry
• Professional Qualification/Certificate in Audit, e.g. CISA, CISSP, CISM, CCSP is a plus