Senior Manager (IT Audit)

Job Description

Reporting to the Chief Audit Officer of the Office of Internal Audit (OIA), the incumbent will work closely with a team of auditors and co-sourcing service providers to carry out audit assignments covering a diverse range of IT systems, processes and controls.

Key Responsibilities

1. Adopting a team-based approach, collaborate with Financial and Operational Auditors to execute integrated audits; the incumbent to support IT risks areas.

   • Manage and work with co-sourced IT audit service providers to ensure their deliverables align with the University's audit objectives and standards.

   • Engage and collaborate with second-line functions (e.g., IT Security and Governance team, CISO unit, Office of Risk Management and Compliance) to ensure a cohesive approach to identify, assess, and mitigate IT-related and operational risks.

2. Plan and execute thematic IT systems audits and IT general controls audits and prepare audit reports with minimal supervision.

   • Effectively communicate audit observations and recommendations to stakeholders and conduct follow-up to ensure timely resolution of matters arising.

   • Proactively contribute to the enhancement and continuous improvement of the IT audit methodology and internal controls framework.

   • Stay informed of emerging IT risks and evolving technologies (e.g., cybersecurity, cloud computing, data analytics, AI), and provide actionable insights and recommendations to address identified risks.

Qualifications

1. A university degree in Information Technology, Information Systems, Computer Science, or a related field.

2. Professional certifications such as CISA (Certified Information System Auditor) or CISSP (Certified Information Systems Security Professional).

3. At least 5 years of working experience in IT audit, preferably in MNC, public sector or higher education sector.

4. Proven experience conducting independent audits across IT Infrastructure, IT General Controls, IT Application Controls, ERP systems and Cybersecurity domains.

5. Strong knowledge of IT governance frameworks and best practices (COBIT, NIST-CSF, ISO 27001).

6. Understanding of cloud infrastructure (e.g., AWS, Azure or Google Cloud) and its associated risks.

7. Experience with IT risk assessment, controls evaluation, and regulatory compliance.

8. Strong analytical, organizational, problem-solving, communication and reporting writing skills.

9. High level of integrity, ethics, and professionalism in handling confidential information.

More Information

Location: Kent Ridge Campus

Employee Referral Eligible: Yes

Job requisition ID: 25995