Senior Information Technology Audit Manager

Gateway Search Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Employee benefits

Training & mentoring

Professional development opportunities

Job summary

Gateway Search Pte Ltd is seeking a Senior IT Audit Manager to join the Risk Management – Internal Audit team in Singapore. You will execute end-to-end IT audit engagements, support US SOX testing, ISO 27001 compliance, and SOC 1 and SOC 2 audit activities, and strengthen internal controls and governance across IT and business processes.

The role demands strong analytical skills, stakeholder management, and the ability to translate technical concepts into business implications.

Qualifications

• Bachelor’s degree in IT, CS, accounting, finance, or related discipline.
• 4–6 years of IT audit, cybersecurity, technology risk, consulting, or GRC experience.
• Hands-on ITGC and ITAC audit experience.
• Big Four experience preferred.
• Knowledge of cybersecurity frameworks (NIST SP 800-53, ISO 27002, ITIL).
• Experience with US SOX, ISO 27001, SOC audits and SoD reviews is an advantage.
• Certifications such as CIA, CISA, CISSP preferred.
• Strong analytical and communication skills with ability to translate technical concepts to business impact.

Responsibilities

• Conduct IT risk assessments across IT infrastructure, cloud, data governance, cybersecurity, and applications.
• Evaluate ITGCs and ITACs for effectiveness and compliance impact.
• Collaborate with IT teams on system changes with clear ownership and accountability.
• Support US SOX testing, ISO 27001, SOC 1/2 audits, and related assurance activities.
• Identify risks from process changes, integrations, and automation; recommend controls.
• Drive continuous improvement of control environment and governance framework.
• Support governance forums with insights on process optimization and risk mitigation.
• Prepare audit documentation, reports, and stakeholder recommendations.

Skills

IT audit

Cybersecurity

Technology risk

GRC

ITGC audits

ITAC audits

Big Four

NIST SP 800-53

ISO 2702

ITIL

SOC audits

SoD reviews

CIA/CISA/CISSP

Stakeholder management

Data analytics

Education

Bachelor's degree in IT/CS/Accounting/Finance

Tools

GRC tools

Job description

Industry - Cloud computing & Data Center

Senior IT Audit Manager

Job Summary

We are seeking a Senior IT Audit Manager to join our Risk Management – Internal Audit team. This role is responsible for executing end-to-end IT audit engagements and supporting US SOX testing, ISO 27001 compliance, and SOC 1 and SOC 2 audit activities. You will play a key role in evaluating IT systems, internal controls, and business processes to strengthen the control environment, ensure regulatory compliance, and mitigate operational risks.

Key Responsibilities

• Conduct IT risk assessments across multiple domains, including IT infrastructure, cloud environments, data governance, cybersecurity, and application systems.
• Evaluate IT General Controls (ITGCs) and IT Application Controls (ITACs), assessing their effectiveness and impact on business processes, automation, and compliance requirements.
• Collaborate with IT teams on system-related changes, ensuring clear ownership and accountability between IT infrastructure, business processes, and control design.
• Support US SOX testing, ISO 27001 compliance, SOC 1 and SOC 2 audits, and other relevant assurance activities.
• Identify and assess risks arising from process changes, system integrations, and automation initiatives, recommending appropriate control enhancements.
• Drive continuous improvement of the organization's internal control environment, governance framework, and risk management practices.
• Support governance forums by providing insights and recommendations on process optimization, control effectiveness, and risk mitigation.
• Prepare clear and comprehensive audit documentation, reports, and recommendations for stakeholders across technical and business functions.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Accounting, Finance, or a related discipline.
• 4–6 years of relevant experience in IT audit, cybersecurity, technology risk, consulting, or Governance, Risk and Compliance (GRC), preferably within an internal audit, external audit, or US-listed company environment.
• Strong hands-on experience conducting ITGC and ITAC audits.
• Experience working in a Big Four auditing firm is strongly preferred.
• Solid knowledge of cybersecurity risk management frameworks and standards, including NIST SP 800-53, ISO 27002, and ITIL. Familiarity with industry guidelines from organizations such as ITU, GSMA, and 3GPP is advantageous.
• Strong understanding of cybersecurity best practices, including risk management, vulnerability management, incident response, cloud security controls, and assurance practices.
• Experience with US SOX, ISO 27001, SOC audits, and Segregation of Duties (SoD) reviews is an advantage.
• Relevant professional certifications such as CIA, CISA, CISSP, or equivalent are preferred.
• Strong analytical, critical-thinking, documentation, and problem-solving skills, with the ability to leverage data, dashboards, and spreadsheets to generate actionable insights.
• Good business acumen, with the ability to understand business workflows, identify operational pain points, and define meaningful success metrics.
• Ability to translate technical IT concepts into business implications and communicate complex audit findings clearly to diverse audiences.
• Strong stakeholder management, interpersonal, and communication skills, with the ability to collaborate effectively across functions and manage competing priorities under pressure.
• Strong project coordination and organizational skills, with the ability to manage multiple engagements, deadlines, deliverables, and follow-ups in a fast-paced environment.
• A proactive and accountable mindset, with an innovative approach to continuous improvement and cross-functional collaboration.
• Basic understanding of AI products and concepts, including the capabilities and limitations of large language models (LLMs) and common business applications.

What We Offer

• An inclusive and collaborative working environment that values authenticity, diversity of thought, and different professional backgrounds.
• Opportunities to work in a dynamic, fast-growing organization with exposure to industry developments and emerging technologies.
• The opportunity to contribute to meaningful projects and have a direct impact on business operations and the development of internal governance and control frameworks.
• Exposure to new initiatives involving the development and enhancement of business processes, systems, and controls.
• A culture that encourages personal accountability, autonomy, continuous learning, and professional growth.
• Attractive employee benefits, alongside training, mentoring, and professional development opportunities.