Technology Risk & IT Audit Lead (AVP/VP)

Morgan McKinley; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Morgan McKinley is seeking an experienced Technology Risk / IT Audit professional to provide independent assurance over technology governance, risk and controls in Singapore. The role collaborates with Technology, Cybersecurity, Risk and business stakeholders to assess controls, challenge effectiveness and drive remediation across cloud, IAM, SDLC and third-party risk.

Applicants should have strong experience in risk reviews, control assessments and reporting, with a track record in regulated

Qualifications

• Approximately 5+ years of experience across Technology Risk, IT Risk & Controls, IT Audit, Technology Assurance, Cyber Risk or related areas.

Responsibilities

• Lead and execute risk-based reviews and IT audits across technology, infrastructure, applications, cybersecurity and IT controls.
• Assess the design and operating effectiveness of technology controls and identify key risk and control gaps.
• Provide practical recommendations to strengthen the organisation's technology risk and control environment.
• Partner with Technology and Risk stakeholders to understand emerging risks, transformation initiatives and changes to the technology landscape.
• Support thematic and integrated reviews covering Cybersecurity, Cloud, Technology Resilience, Access Management, Change Management, SDLC and Third-Party Technology Risk.
• Assess alignment with regulatory requirements, industry standards and internal technology-risk frameworks.
• Monitor remediation of identified control gaps and provide challenge to stakeholders.
• Contribute to risk assessments and audit planning by identifying emerging technology and cybersecurity risks.
• Communicate findings and risk themes clearly to senior Technology and business stakeholders.

Skills

Technology risk

IT audit

Cyber risk

Regulatory knowledge

Stakeholder mgmt

Job description

Morgan McKinley is seeking an experienced Technology Risk / IT Audit professional to provide independent assurance over technology governance, risk and controls in Singapore. The role collaborates with Technology, Cybersecurity, Risk and business stakeholders to assess controls, challenge effectiveness and drive remediation across cloud, IAM, SDLC and third-party risk.

Applicants should have strong experience in risk reviews, control assessments and reporting, with a track record in regulated