Senior Manager, IT Audit

MOH Holdings (Singapore); Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

MOH Holdings (Singapore) invites a seasoned IT auditor to assess application systems, including SAP and healthcare clinical systems, to support hospital operations.

You will review data accuracy, access controls, and SDLC security features, while advising on data analytics-driven improvements and IT infrastructure readiness for disaster recovery.

Qualifications

• Degree in Computing or Accountancy.
• CIA/CISA/CRISC/CISM/CISSP/PMP/Agile certifications are added advantage.
• Practical knowledge of Microsoft technologies, open source (e.g. Linux), SAP HANA, OBIEE, SQL, RPA (e.g. UI Path), Oracle, cloud hosting, behavioural analytics, datacentre operations or SaaS will be beneficial.
• Good understanding of the audit methodology and the security defence measures put in place.
• Strong understanding and risk and controls, ability to articulate issues, and provide board & management reporting.

Responsibilities

• Present and communicate IT audit findings to the Audit Committee and Senior Management of the MOHH group.
• Articulate IT, Operations and cyber security observations to senior management.
• Ensure staff compliance with Audit Procedures for audit plans, working papers, reports and ad hoc assignments.
• Manage resources and projects to meet the internal audit plan and deliver quality outputs.
• Drive IT audits, advisory and investigation work with stakeholders.
• Prepare and present insightful findings to Management and Audit Committee; perform other duties as assigned.
• Deliver high quality and efficient audit and advisory services.
• Coach and develop team members and drive IT capability growth.
• Oversee IT auditors' performance, training and resource allocation.
• Maintain key business relationships with internal leadership and external auditors.

Skills

IT audit

Data analytics

Security controls

SAP

Cloud hosting

Audit methodologies

Leadership

Education

Degree in Computing or Accountancy

Tools

SAP HANA

OBIEE

RPA (UI Path)

Linux

SQL

Oracle

Job description

In the role, you’ll required to assess IT application systems including business application systems (e.g. SAP) and healthcare clinical systems supporting the hospital operations

• Application controls (input controls, output controls, application configurations; processing logic and interface controls).
• Assess adequacy of accuracy, completeness and availability of data
• Review access controls including SAP Authorisation.
• Using Data Analytics to identify improvements in application design / system transaction flows, or improvement in business processes.
• Review operating systems and database security as well as IT operational controls (e.g. change controls, computer operations, monitoring controls, etc.).
• Participate in System Development Life Cycle (SDLC) review to provide advice on security and control features during the development stage including pre-implementation and post-implementation controls.
• To review the system availability in relation to IT infrastructure setup, disaster recovery plan and readiness in testing.

JOB RESPONSIBILITIES

• To present and communicate with the Audit Committee and Senior Management of the MOHH group of entities on the IT audit findings.
• To present and articulate the IT, Operations and cyber security observations to senior management.
• Ensures staff compliance with Audit Procedures when reviewing/approving audit plans, working papers, audit reports and other ad hoc assignments submitted by staff.
• Managing resources and projects to meet the internal audit plan established and delivery of quality outputs.
• Drive IT audits, advisory and investigation work on the stakeholders.
• Prepare and present insightful findings to Management and Audit Committee, and perform any other duties as assigned.
• Deliver high quality and efficient audit and advisory services.
• Coach and develop people by sharing knowledge with team members and helping team members attain experiences that cultivate technical competencies.
• Manage IT auditors’ performance, oversee IT training and development and ensure appropriate resources of IT capabilities.
• Establishing and maintaining key business relationships with internal firm leadership and the firm's external auditors resulting in maximum effectiveness.
• Plan, perform and lead audits of complex system and/or operations or perform components of such audits.

JOB REQUIREMENTS

Education Requirement(s):

• Degree in Computing or Accountancy
• CIA/CISA/CRISC/CISM/CISSP/PMP/Agile certifications are added advantage.

Key Qualities:

• Practical knowledge of Microsoft technologies, open source (e.g. Linux), SAP HANA, OBIEE, SQL, RPA (e.g. UI Path), Oracle, cloud hosting, behavioural analytics, datacentre operations or SaaS (Software As A Service) will be beneficial.
• Good understanding of the audit methodology and the security defence measures put in place.
• Strong understanding and risk and controls, ability to articulate issues, and provide board & management reporting.
• Strong understanding of complex business and IT processes, and their related risks.
• Staff and audit project management experience is preferred.
• Proven experience in delivering internal audit and advisory engagements.
• Able to evaluate IT internal controls and identify opportunities for controls improvement.
• Able to identify other areas of business initiatives and changes in the business environment and assess their impact on the business control environment.
• Resourceful and possess good interpersonal and communication skills as well as good leadership qualities.
• Able to work independently and as an effective team player.

Years of Experience Required:

• At least 7 years of IT external or internal audit working experience to audit the application systems with big 4 Accounting firms or large conglomerates.
• Years of IT security implementation experience either from in-house capability; a Service Integrator (SI) environment or from a consulting firm are also welcome.