Technology Risk & IT Audit

This position is designed to offer independent assurance regarding technology governance, risk, and controls, collaborating closely with Technology, Cybersecurity, Risk, and various business stakeholders. We welcome applications from individuals with backgrounds in either IT Audit or Technology Risk & Controls, as long as they possess substantial experience in evaluating technology controls and challenging their effectiveness.

Key Responsibilities

• Lead and conduct risk-based reviews and IT audits across technology, infrastructure, applications, cybersecurity, and IT controls.
• Evaluate the design and operational effectiveness of technology controls while identifying significant risk and control deficiencies.
• Deliver actionable recommendations to enhance the organization's technology risk and control framework.
• Collaborate with Technology and Risk stakeholders to gain insights into emerging risks, transformation projects, and shifts in the technology landscape.
• Assist with thematic and integrated reviews that encompass areas such as Cybersecurity, Cloud, Technology Resilience, Access Management, Change Management, SDLC, and Third-Party Technology Risk.
• Evaluate compliance with relevant regulatory standards, industry benchmarks, and internal technology-risk frameworks.
• Oversee the remediation of identified control deficiencies and offer constructive challenges to stakeholders.
• Contribute to risk assessments and audit planning by pinpointing emerging technology and cybersecurity risks.
• Effectively communicate findings and risk themes to senior Technology and business stakeholders.
• Support ad-hoc reviews, investigations, and ongoing monitoring of emerging technology risks.

Requirements:

• Approximately 5+ years of experience in Technology Risk, IT Risk & Controls, IT Audit, Technology Assurance, Cyber Risk, or related fields.
• Candidates currently positioned in 1LOD Technology Risk & Controls, 2LOD Technology Risk, or 3LOD IT Audit are encouraged to apply.
• Strong comprehension of technology risks and controls in areas such as Cloud, Cybersecurity, Infrastructure, Applications, IAM, SDLC, Technology Resilience, and Third-Party Risk.
• Experience in performing control assessments, risk reviews, audit/assurance tasks, or independent challenge activities.
• Experience in the financial services sector, specifically within banking, insurance, asset management, or other regulated environments, is preferred.
• Familiarity with technology risk regulatory standards in Singapore and the broader region, including MAS technology risk requirements, is advantageous.
• Professional certifications such as CISA, CISM, CRISC, CISSP, or CCSP are beneficial.
• Exceptional stakeholder management capabilities with the ability to constructively challenge and influence senior Technology stakeholders.
• Strong analytical, report-writing, and presentation skills.
• Ability to work autonomously while effectively contributing to a collaborative team environment.

Individuals with experience in Technology Risk & Controls, particularly those with exposure to IT audit, control assurance, risk assessments, or independent control reviews, are encouraged to submit their applications.

Interested candidates may apply by sending their updated CV.