Technology Risk & IT Audit Manager

Morgan McKinley; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Morgan McKinley in Singapore is seeking a seasoned professional to provide independent assurance over technology governance, risk and controls. The role focuses on assessing controls across Cloud, Cybersecurity, IAM and SDLC, challenging control effectiveness and delivering practical improvements.

The ideal candidate brings 5+ years in IT risk or audits, with a background in financial services. Strong communication and independent work style are essential for success in this collaborative

Qualifications

• 5+ years of experience across Technology Risk, IT Risk & Controls, IT Audit, Technology Assurance, Cyber Risk or related areas.
• Experience in 1LOD Technology Risk & Controls, 2LOD Technology Risk or 3LOD IT Audit welcome to apply.
• Strong understanding of technology risks across Cloud, Cybersecurity, Infrastructure, Applications, IAM, SDLC, Technology Resilience and Third-Party Risk.
• Experience conducting control assessments, risk reviews, audit/assurance activities or independent challenge.
• Financial services experience in regulated environments preferred.
• Familiarity with MAS technology risk requirements advantageous.
• Certifications such as CISA, CISM, CRISC, CISSP or CCSP beneficial.
• Strong stakeholder-management, analytical, report-writing and presentation skills.
• Ability to work independently while contributing within a team.

Responsibilities

• Lead and execute risk-based reviews and IT audits across technology, infrastructure, applications, cybersecurity and IT controls.
• Assess the design and operating effectiveness of technology controls and identify key risk and control gaps.
• Provide practical recommendations to strengthen the organisation's technology risk and control environment.
• Partner with Technology and Risk stakeholders to understand emerging risks, transformation initiatives and changes to the technology landscape.
• Support thematic and integrated reviews across Cybersecurity, Cloud, Technology Resilience, Access Management, Change Management, SDLC and Third-Party Technology Risk.
• Assess alignment with regulatory requirements and internal risk frameworks.
• Monitor remediation of control gaps and challenge stakeholders.
• Contribute to risk assessments and audit planning by identifying emerging technology and cybersecurity risks.
• Communicate findings and risk themes to senior Technology and business stakeholders.
• Support ad-hoc reviews, investigations and continuous monitoring of emerging technology risks.

Skills

IT audit experience

Risk assessment

Stakeholder management

Report writing

Independent work

Tools

GRC software

Job description

This role will provide independent assurance over technology governance, risk and controls, working closely with Technology, Cybersecurity, Risk and business stakeholders. We are open to candidates coming from either IT Audit or Technology Risk & Controls, provided they have strong experience assessing technology controls and challenging control effectiveness.

Key Responsibilities

• Lead and execute risk-based reviews and IT audits across technology, infrastructure, applications, cybersecurity and IT controls.
• Assess the design and operating effectiveness of technology controls and identify key risk and control gaps.
• Provide practical recommendations to strengthen the organisation's technology risk and control environment.
• Partner with Technology and Risk stakeholders to understand emerging risks, transformation initiatives and changes to the technology landscape.
• Support thematic and integrated reviews covering areas such as Cybersecurity, Cloud, Technology Resilience, Access Management, Change Management, SDLC and Third-Party Technology Risk.
• Assess alignment with relevant regulatory requirements, industry standards and internal technology-risk frameworks.
• Monitor remediation of identified control gaps and provide appropriate challenge to stakeholders.
• Contribute to risk assessments and audit planning by identifying emerging technology and cybersecurity risks.
• Communicate findings and risk themes clearly to senior Technology and business stakeholders.
• Support ad-hoc reviews, investigations and continuous monitoring of emerging technology risks.

Requirements:

• Approximately 5+ years of experience across Technology Risk, IT Risk & Controls, IT Audit, Technology Assurance, Cyber Risk or related areas.
• Candidates currently working in 1LOD Technology Risk & Controls, 2LOD Technology Risk or 3LOD IT Audit are welcome to apply.
• Strong understanding of technology risks and controls across areas such as Cloud, Cybersecurity, Infrastructure, Applications, IAM, SDLC, Technology Resilience and Third-Party Risk.
• Experience conducting control assessments, risk reviews, audit/assurance activities or independent challenge.
• Financial services experience within banking, insurance, asset management or other regulated environments is preferred.
• Familiarity with technology risk regulatory requirements in Singapore and the wider region, including MAS technology risk requirements, would be advantageous.
• Professional certifications such as CISA, CISM, CRISC, CISSP or CCSP would be beneficial.
• Strong stakeholder-management skills with the ability to challenge constructively and influence senior Technology stakeholders.
• Strong analytical, report-writing and presentation skills.
• Ability to work independently while contributing effectively within a collaborative team.

Candidates with Technology Risk & Controls experience who have exposure to IT audit, control assurance, risk assessments or independent control reviews are encouraged to apply.

Pam Lim

Morgan Mckinley Pte Ltd

EA Licence No: 11C5502 | EAP Registration No: R1106192