Senior IT Audit Manager

ENGGSOL PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

ENGGSOL PTE. LTD. in Singapore is seeking an experienced IT audit professional to lead IT risk assessments, develop audit programs, and deliver concise reporting to the Audit Committee.

You will apply data analytics, manage outsourced auditors, and mentor junior staff while driving continuous improvement of IT audit methodologies. Travel up to 30% may be required.

Qualifications

• 8+ years IT audit or IT risk management experience.
• 3+ years in a supervisory/leadership capacity.
• Experience interacting with senior management and stakeholders.
• CIA, CISA or CISSP certifications desirable.
• Security concepts and configurations across SAP S4/HANA, Oracle EBS, Windows, Azure AD, Linux, MS SQL.

Responsibilities

• Contribute to IT audit plan development and reporting to the Audit Committee.
• Develop and improve IT audit methodologies and programs.
• Prepare detailed audit programs for IT audits and Integrated audits using risk-based auditing, data analytics, and professional judgement.
• Apply project management to audit assignments to meet quality standards and deadlines.
• Lead audit engagements from planning to reporting, ensuring timely completion and adherence to standards.
• Provide on-the-job training/coaching for team members and mentor junior auditors.
• Manage outsourced internal auditors.
• Evaluate root causes and deliver high-quality reports with sound recommendations.
• Present audit observations at closing meetings and to the Audit Committee when required.
• Utilize data analytics and audit tools to evaluate risk exposure and gaps.
• Manage special projects such as automation and data analytics.
• Drive improvement initiatives to foster collaboration and share best practices learned.

Skills

Leadership

Mentoring

Stakeholder management

Communication skills

Data analytics

Education

Degree in IT/CS/Accounting or equivalent

Tools

SAP S4/HANA

Oracle EBS

Windows

Azure AD

Linux

MS SQL

Job description

Contribute to the development of the IT audit plan and reporting packages to the Company Audit Committee.

Contribute to the development and improvement to IT audit methodologies and programs.

Prepare detailed audit program to lead IT audits and Integrated audits through applying risk-based auditing skills, usage of data analytics and professional judgement.

Apply effective project management to audit assignments and other projects to complete engagements which meets quality standards, deadlines, and expectations.

Lead audit engagements from planning to reporting, ensuring timely completion and adherence to standards.

Provide on job training/coaching of team members for their technical development.

Manage outsourced internal auditors.

Evaluate underlying root causes and impact to provide and deliver high quality, concise reports, feasible and sound recommendations to the businesses, aligned with the Group's directives.

Present audit observations at closing meetings and to the Audit Committee (where required).

Utilise appropriate audit techniques and tools (such as data analytics) in auditing methods to evaluate organisation risk exposure and gaps.

Manage special projects such as automation, and data analytics.

Manage other improvement projects/initiatives to promote a collaborative environment and share knowledge and best practices learned.

Requirements:

• Degree in IT (Information Systems)/ Computer Science/Accountancy or equivalent.
• At least 8 years IT audit/IT risk management experience, either in Internal Audit or with a reputable professional service firm.
• At least 3 years in a supervisory/leadership capacity with demonstrated ability to work independently and mentor junior auditors.
• Demonstrates experience in interaction with senior management and stakeholders.
• Professional certifications such as CIA, CISA and CISSP are highly desirable.
• Solid knowledge of security concepts and configurations of SAP S4/HANA, Oracle EBS, Windows, Azure AD, Linux, MS SQL, etc.
• Possesses good understanding of cybersecurity frameworks, controls and processes, including vulnerability and patch management, virus and malware protection, DLP, intrusion detection, and crisis management and incident response.
• Requires business travelling up to 30% a year.
• Good interpersonal and communication skills.