Senior IT Auditor

Assurity Trusted Solutions Pte Ltd; Singapore; On-site; SGD 80,000 - 100,000; Full time

Job summary

A government-owned technology firm in Singapore is seeking an experienced professional for IT audit and risk assessment roles. Responsibilities include developing audit programs, conducting ICT audits, and evaluating agencies' risk posture. The ideal candidate has over 5 years in IT audit, strong data privacy background, and is proficient in managing stakeholders. Competitive compensation and a collaborative work environment are included.

Benefits

Learning culture and growth opportunities

Annual Leave Benefits

Collaborative working environment

Qualifications

• 5+ years of experience in IT audit, risk assessment, or ICT governance.
• Strong knowledge of data privacy, IM8 compliance, and security frameworks.
• Experience auditing complex IT environments.

Responsibilities

• Develop customised audit programmes and security checklists.
• Conduct comprehensive ICT&SS audits for government agencies.
• Evaluate agencies' ICT governance maturity and risk posture.

Skills

IT audit

Risk assessment

Data privacy compliance

Stakeholder management

Analytical skills

Education

Degree in IT, Computer Science, Cybersecurity

CISA, CISSP certifications

Job description

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

Key Responsibilities:

Audit Planning & Programme Development

• Develop customised audit programmes and security checklists to assess internal controls for IT risks, emphasising data privacy, IM8 compliance, and emerging technologies including cloud services and AI systems.
• Plan annual audits and technical assessments of critical systems and infrastructure, utilising risk-based methodologies and continuous monitoring approaches.
• Manage outsourced audit resources and specialist expertise to deliver committed audit deliverables whilst maintaining quality standards.

Audit Execution & Fieldwork

• Conduct comprehensive ICT&SS audits for agencies designated by Central Digital Assurance (CDA), focusing on data security and privacy controls, security frameworks, and hybrid cloud environments.
• Execute in-depth audits of government systems up to Secret classification, evaluating sensitive personal data handling, AI governance, and zero trust architecture implementation.
• Manage agency relationships throughout audit lifecycle, from briefings to fieldwork execution, ensuring timely delivery through effective stakeholder engagement.

Risk Assessment & Strategic Analysis

• Evaluate agencies' ICT governance maturity and risk posture, particularly regarding data privacy compliance, security controls, third-party risks, and cyber resilience against evolving threats including AI Governance.
• Formulate strategic mitigation plans to strengthen ICT governance, data privacy frameworks, data sharing compliance, and privacy-by-design implementation across government systems.

Follow-up & Continuous Monitoring

• Perform follow-up audits and validation of remediation efforts to ensure effective control implementation and root cause resolution.
• Maintain central audit findings repository and monitor remediation progress using analytics to support continuous improvement initiatives.

Requirements

• Degree in IT, Computer Science, Cybersecurity, or related field; CISA, CISSP, or equivalent certifications preferred.
• 5+ years of experience in IT audit, risk assessment, or ICT governance.
• Strong knowledge of data privacy, IM8 compliance, cloud services, AI governance, and security frameworks (e.g. ISO 27001, NIST).
• Experience auditing complex IT environments, including hybrid cloud and systems with sensitive or classified data.
• Proven ability to manage stakeholders, vendors, and outsourced audits effectively.
• Strong analytical skills with experience in formulating strategic recommendations and using audit analytics.
• Familiarity with public sector ICT policies and regulatory compliance (e.g. PDPA, privacy-by-design).

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now".

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: https://www.assurity.sg/privacy.html or such other successor site.

Benefits

• We promote a learning culture and encourage you to grow and learn.
• Annual Leave Benefits with additional perks such as Family Care and Birthday Leave.
• Working in a collaborative environment with helpful team members