Assistant Director, Internal Audit (IT), IAU

The jobholder will lead the IT audit function through evaluation of risk management, control, governance processes, and providing recommendations to enhance operational efficiency and improve governance and controls. He/she will play a key role in driving continuous improvements, ensuring compliance with audit standards and fostering a culture of accountability and transparency within the organization.

• Lead risk-based IT audits using data analytics to identify issues and process improvements, perform root cause analysis, and develop recommendations for improving operations, controls and compliance with operational procedures, laws and regulations, and procedures • Work with stakeholders to oversee IT audits and annual audit planning • Collaborate with IA advisory team to provide advisory or consultations to MOM divisions when required for new processes or changes in IT processes • Coach and guide officers in audit projects, including compliance with IA manual for quality assurance purpose, and completion of annual IT audit workplan, and advisory IT consultations • Develop continuous auditing IT projects to facilitate better risk monitoring • Support MOM divisions and departments in IT audits • Responsible for briefing management on potential issues and ensure smooth execution of IT audits to meet deliverables • Follow up on implementation status of past IT audit issues and provide status update to the Audit Committee

• At least 10 years of experience in ICT audit and/or compliance management • Audit experience and knowledge relating to cyber security, network and infrastructure, cloud security and virtualisation, application security and development, data privacy and protection, and/or business continuity and disaster recovery is an advantage. • Possess related professional certifications such as Certified Information Systems Auditor (CISA) and cloud security certification • Experience in data analytics is preferred • Prior experience leading and supervising audits is preferred • Strong understanding of technology, IT management processes, technology risks and internal controls • Possess an inquisitive mind and demonstrate a keen willingness to learn • Good written and verbal communication and presentation skills • Able to engage stakeholders to seek buy-in on audit issues