Manager / Senior Manager, IT Audit

MOH Holdings (Singapore); Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

MOH Holdings (Singapore) seeks an experienced IT Audit specialist to assess application systems including SAP and healthcare clinical systems supporting hospital operations. You will review controls, data accuracy, access management, and security across OS, databases, and cloud hosting, and provide advisory input during SDLC pre- and post-implementation.

You will present findings to Audit Committee and Senior Management, manage resources and projects, drive IT audits and advisory work, and coach

Qualifications

• Familiar with IT risk and controls in enterprise environments.
• Experience in IT audits or advisory engagements preferred.
• Ability to evaluate IT internal controls and identify improvement opportunities.

Responsibilities

• Present IT audit findings to the Audit Committee and Senior Management.
• Communicate IT, operations and cyber security observations to management.
• Manage audit plans, working papers, reports and ad hoc tasks.
• Lead IT audits, advisory and investigation work with stakeholders.
• Deliver high-quality audit outputs and develop team capabilities.
• Plan, perform and lead audits of complex systems and operations.

Skills

Communication skills

Leadership

Independent work

Team player

Stakeholder management

Education

Degree in Computing

Degree in Accountancy

CIA/CISA/CRISC/CISM/CISSP/PMP/Agile certs add'l

Tools

SAP HANA

OBIEE

SQL

RPA (UI Path)

Oracle

Linux

Cloud hosting

SaaS

Job description

In the role, you’ll required to assess IT application systems including business application systems (e.g. SAP) and healthcare clinical systems supporting the hospital operations

• Application controls (input controls, output controls, application configurations; processing logic and interface controls).
• Assess adequacy of accuracy, completeness and availability of data
• Review access controls including SAP Authorisation.
• Using Data Analytics to identify improvements in application design / system transaction flows, or improvement in business processes.
• Review operating systems and database security as well as IT operational controls (e.g. change controls, computer operations, monitoring controls, etc.).
• Participate in System Development Life Cycle (SDLC) review to provide advice on security and control features during the development stage including pre-implementation and post-implementation controls.
• To review the system availability in relation to IT infrastructure setup, disaster recovery plan and readiness in testing.

JOB RESPONSIBILITIES

• To present and communicate with the Audit Committee and Senior Management of the MOHH group of entities on the IT audit findings.
• To present and articulate the IT, Operations and cyber security observations to senior management.
• Ensures staff compliance with Audit Procedures when reviewing/approving audit plans, working papers, audit reports and other ad hoc assignments submitted by staff.
• Managing resources and projects to meet the internal audit plan established and delivery of quality outputs.
• Drive IT audits, advisory and investigation work on the stakeholders.
• Prepare and present insightful findings to Management and Audit Committee, and perform any other duties as assigned.
• Deliver high quality and efficient audit and advisory services.
• Coach and develop people by sharing knowledge with team members and helping team members attain experiences that cultivate technical competencies.
• Manage IT auditors’ performance, oversee IT training and development and ensure appropriate resources of IT capabilities.
• Establishing and maintaining key business relationships with internal firm leadership and the firm's external auditors resulting in maximum effectiveness.
• Plan, perform and lead audits of complex system and/or operations or perform components of such audits.

JOB REQUIREMENTS

Education Requirement(s):

• Degree in Computing or Accountancy
• CIA/CISA/CRISC/CISM/CISSP/PMP/Agile certifications are added advantage.

Key Qualities:

• Practical knowledge of Microsoft technologies, open source (e.g. Linux), SAP HANA, OBIEE, SQL, RPA (e.g. UI Path), Oracle, cloud hosting, behavioural analytics, datacentre operations or SaaS (Software As A Service) will be beneficial.
• Good understanding of the audit methodology and the security defence measures put in place.
• Strong understanding and risk and controls, ability to articulate issues, and provide board & management reporting.
• Strong understanding of complex business and IT processes, and their related risks.
• Staff and audit project management experience is preferred.
• Proven experience in delivering internal audit and advisory engagements.
• Able to evaluate IT internal controls and identify opportunities for controls improvement.
• Able to identify other areas of business initiatives and changes in the business environment and assess their impact on the business control environment.
• Resourceful and possess good interpersonal and communication skills as well as good leadership qualities.
• Able to work independently and as an effective team player.

Years of Experience Required:

• At least 7 years of IT external or internal audit working experience to audit the application systems with big 4 Accounting firms or large conglomerates.
• Years of IT security implementation experience either from in-house capability; a Service Integrator (SI) environment or from a consulting firm are also welcome.