Assistant Manager / Manager - IT Audit

About the role

This role manages and executes IT audit engagements, assesses technology-related risks and internal controls, and recommends control improvements. It reports to the Head of Internal Audit or the IT Audit Lead and ensures audit activities align with the bank's risk management framework, regulatory requirements and strategic objectives.

Key responsibilities

• Plan and risk-assess IT audits: support the IT Audit Universe and risk-based annual audit plan, identify emerging technology and cybersecurity risks, and develop audit scopes, objectives, programmes and testing methods.
• Lead and run IT audit engagements, reviewing system configurations, access controls, security logs and operational processes, and assessing the design and operating effectiveness of IT controls.
• Check compliance with regulatory requirements such as MAS Technology Risk Management (TRM) Guidelines, and evaluate controls against ISO 27001, COBIT, NIST and other frameworks; recommend stronger IT governance.
• Prepare and review audit reports for management and governance committees, discuss findings with IT management and process owners, and monitor remediation plans.
• Supervise IT Audit Executives, allocate assignments, coach and review working papers, and help build audit methodologies, procedures and templates.
• Lead special IT reviews and investigations into technology-related incidents, assessing root causes and recommending actions to management.

Required profile

• Bachelor's degree in computer science, information technology, information systems or a related discipline.
• 6-8 years of experience in IT audit, IT risk, IT security or technology governance.
• At least 2-3 years leading or supervising audit engagements.
• Experience in core banking systems and digital banking environments is preferred.
• CISA certification highly preferred; CISSP, CRISC or similar certifications are an advantage.

Required skills

• Strong knowledge of ITGC, IT application controls, cybersecurity, IT infrastructure and banking systems.
• Good knowledge of MAS TRM, ISO 27001, COBIT, NIST and regulatory compliance.
• Strong report writing, stakeholder management, analytical and leadership skills.