Senior/IT Auditor

Assurity Trusted Solutions Pte Ltd; Singapore; On-site; SGD 80,000 - 100,000; Full time

Job summary

A government technology agency subsidiary is seeking an experienced IT Auditor to develop customized audit programs and assess internal controls. The ideal candidate has over 5 years of experience in IT audit and strong knowledge of data privacy and ICT governance. This role promotes a collaborative environment with annual leave benefits and further personal development opportunities.

Benefits

Annual Leave Benefits

Family Care Leave

Birthday Leave

Learning culture

Qualifications

• 5+ years of experience in IT audit, risk assessment, or ICT governance.
• Professional certifications like CISA, CISSP, or equivalent preferred.
• Familiarity with public sector ICT policies and regulatory compliance.

Responsibilities

• Develop customized audit programmes and security checklists.
• Conduct comprehensive ICT audits focusing on data security.
• Evaluate agencies' ICT governance maturity and formulate strategic plans.

Skills

Data privacy knowledge

Stakeholder management

Analytical skills

ICT governance

Cloud services

Education

Degree in IT, Computer Science, Cybersecurity or related field

Tools

ISO 27001

NIST

Job description

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

Key Responsibilities

Audit Planning & Programme Development

• Develop customised audit programmes and security checklists to assess internal controls for IT risks, emphasising data privacy, IM8 compliance, and emerging technologies including cloud services and AI systems.
• Plan annual audits and technical assessments of critical systems and infrastructure, utilising risk-based methodologies and continuous monitoring approaches.
• Manage outsourced audit resources and specialist expertise to deliver committed audit deliverables whilst maintaining quality standards.

Audit Execution & Fieldwork

• Conduct comprehensive ICT&SS audits for agencies designated by Central Digital Assurance (CDA), focusing on data security and privacy controls, security frameworks, and hybrid cloud environments.
• Execute in-depth audits of government systems up to Secret classification, evaluating sensitive personal data handling, AI governance, and zero trust architecture implementation.
• Manage agency relationships throughout audit lifecycle, from briefings to fieldwork execution, ensuring timely delivery through effective stakeholder engagement.

Risk Assessment & Strategic Analysis

• Evaluate agencies' ICT governance maturity and risk posture, particularly regarding data privacy compliance, security controls, third-party risks, and cyber resilience against evolving threats including AI Governance.
• Formulate strategic mitigation plans to strengthen ICT governance, data privacy frameworks, data sharing compliance, and privacy-by-design implementation across government systems.

Follow-up & Continuous Monitoring

• Perform follow-up audits and validation of remediation efforts to ensure effective control implementation and root cause resolution.
• Maintain central audit findings repository and monitor remediation progress using analytics to support continuous improvement initiatives.

Requirements

• Degree in IT, Computer Science, Cybersecurity, or related field; CISA, CISSP, or equivalent certifications preferred.
• 5+ years of experience in IT audit, risk assessment, or ICT governance.
• Strong knowledge of data privacy, IM8 compliance, cloud services, AI governance, and security frameworks (e.g. ISO 27001, NIST).
• Experience auditing complex IT environments, including hybrid cloud and systems with sensitive or classified data.
• Proven ability to manage stakeholders, vendors, and outsourced audits effectively.
• Strong analytical skills with experience in formulating strategic recommendations and using audit analytics.
• Familiarity with public sector ICT policies and regulatory compliance (e.g. PDPA, privacy-by-design).

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now".

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: https://www.assurity.sg/privacy.html or such other successor site.

Benefits

• We promote a learning culture and encourage you to grow and learn.
• Annual Leave Benefits with additional perks such as Family Care and Birthday Leave.
• Working in a collaborative environment with helpful team members