VP, Internal Audit (Technology Audit Focus)

LMA Recruitment; Singapore; Presencial; SGD 180.000 - 240.000; Jornada completa

Descripción de la vacante

LMA Recruitment Limited is seeking an experienced IT Audit leader to support the Head of Internal Audit across the Asia region. The role emphasizes technology risk, IT controls, and cross-border audit coverage, with oversight of ITGC, cybersecurity and regulatory compliance.

The incumbent will plan, execute and report on regional audits, manage technology risk assessments and ensure high-quality assurance across enterprise systems and applications. Travel across Asia is expected as required.

Formación

• Degree in Accounting, Finance, IT, CS, or related field.
• Professional certifications such as CISA, CIA, CISM, CRISC preferred.
• 6+ years in internal audit, IT audit or technology risk.
• Strong experience in ITGC, enterprise systems, cybersecurity, and network controls.
• Experience with multi-jurisdictional environments across Asia is a plus.

Responsabilidades

• Develop regional risk-based audit plan covering business and technology risks.
• Conduct enterprise-wide risk assessments of regional operations.
• Lead IT audits across regional entities and oversee ITGC and cybersecurity reviews.
• Oversee integrated audits of business processes and IT controls.
• Report audit findings to senior management and Audit Committee; track remediation.
• Coordinate with external auditors and regulators; travel to Asia.

Conocimientos

IT audit

ITGC

Cybersecurity

Risk assessment

Stakeholder mgmt

Cross-border audits

Regulatory knowledge

Data governance

Leadership

Cloud tech

Educación

Degree in Accounting/Finance/IT

CISA/CIA/CISM/CRISC or equivalent

Descripción del empleo

The incumbent will support the Head of Internal Audit in leading the regional internal audit function, with a strong focus on technology, IT controls and technology-related risks across multiple jurisdictions.

The role will oversee audit planning, execution and reporting across regional entities, covering both business and technology risks. This includes IT audits across enterprise systems, IT General Controls (ITGC), cybersecurity, network vulnerabilities, application controls and technology-related regulatory compliance.

The incumbent will provide independent assurance on the effectiveness of internal controls and identify key risk areas, control gaps and opportunities for improvement, while ensuring alignment with regulatory requirements, company policies, industry best practices and internal audit standards.

Key Responsibilities

• Support the Head of Internal Audit in developing the regional risk-based audit plan, incorporating both business and technology risks.
• Conduct enterprise-wide risk assessments across regional operations, including assessment of technology and IT-related risks.
• Identify and prioritise key technology risk areas based on business, regulatory and cybersecurity exposures.
• Develop audit coverage across IT infrastructure, enterprise systems, applications, cybersecurity, ITGC, data and technology operations.
• Ensure audit plans align with group audit strategy, regulatory expectations and Board/Audit Committee priorities.

IT Audit & Technology Risk

• Lead and oversee IT audits across regional entities, business units and enterprise systems.
• Evaluate the design and effectiveness of IT General Controls (ITGC), including: Access and user management, Change management, IT operations and system controls, Backup and recovery and System development and implementation
• Conduct reviews of cybersecurity, information security and network vulnerabilities to identify control gaps and potential areas of exposure.
• Assess internal controls over enterprise applications and technology platforms to ensure appropriate security, reliability and integrity.
• Evaluate technology controls against regulatory requirements, company security policies and industry best practices.
• Assess risks relating to data governance, data security and access to sensitive information.
• Identify emerging technology risks and recommend enhancements to the organisation's technology control environment.
• Oversee follow-up and tracking of technology-related audit findings and remediation efforts through to closure.

Integrated Audit Execution & Oversight

• Oversee the execution of regional internal audits across business units and subsidiaries.
• Lead integrated audits combining business process, financial and IT controls to assess end-to-end risks.
• Review audit workpapers, findings and reports to ensure issues are appropriately identified, risk-rated and supported by practical recommendations.
• Ensure audits comply with IIA standards, internal audit methodologies and relevant technology audit practices.
• Monitor audit quality and consistency across the region.

Regional Governance & Reporting

• Prepare audit reports and provide clear insights on key control weaknesses, emerging risks and governance issues.
• Present significant technology, cybersecurity and IT control risks to senior management and the Audit Committee.
• Track management action plans and remediation progress, ensuring significant findings are appropriately addressed and closed.
• Support the Head of Internal Audit in presenting key audit matters to the Audit Committee and Board where required.
• Liaise with external auditors, regulators and compliance functions on relevant technology and control matters.

Stakeholder Management

• Partner with senior management, regional leadership, IT/Technology, Information Security, Risk, Compliance and functional heads.
• Build effective relationships with technology stakeholders while maintaining appropriate internal audit independence and objectivity.
• Provide constructive insights and recommendations to strengthen the overall technology and internal control environment.
• Act as the delegate for the Head of Internal Audit when required.
• Lead and mentor the internal audit team, including providing guidance on IT audit, technology risk and internal control assessments.
• Provide guidance on audit methodology, risk assessment, control testing and investigation techniques.
• Support recruitment, training and professional development of audit staff.
• Promote consistent audit practices across regional teams.
• Drive improvements in audit analytics, continuous monitoring, automation and technology-enabled audit techniques.
• Identify opportunities to improve the efficiency and effectiveness of IT audit and internal audit processes.
• Keep abreast of emerging technology, cybersecurity and regulatory risks and assess their potential impact on the organisation.
• Promote a strong culture of internal controls, technology risk awareness and continuous improvement across the organisation.

Requirements

• Degree in Accounting, Finance, Information Technology, Computer Science, Business or a related discipline.
• Professional certifications such as CISA, CIA, CISM, CRISC or equivalent are preferred.
• At least 6 years of relevant experience in internal audit, IT audit, technology risk, IT controls or assurance, with significant exposure to technology and IT risk.
• Strong experience in IT audit and technology controls, including ITGC, enterprise systems, applications, cybersecurity and network controls.
• Experience assessing internal controls against regulatory requirements, company security policies and industry best practices.
• Proven track record in conducting or leading audits covering cybersecurity, network vulnerabilities, ITGC and enterprise applications.
• Experience leading integrated audits combining business process and IT controls.
• Exposure to data governance, information security, cloud technology and/or third-party technology risk would be advantageous.
• Exposure to multi-jurisdictional regulatory environments, preferably across Asia.
• Strong analytical and problem-solving abilities, with the ability to translate complex technology risks into clear business implications.
• Excellent stakeholder management and influencing skills.
• Experience preparing audit reports and presenting key findings to senior management and Board/Audit Committee.
• Ability to manage complex cross-border audit engagements.
• Regular travel to Asian countries will be required.