IT audit

Responsibilities

• Plan and execute IT audits across systems, applications, and infrastructure to assess the effectiveness of controls

• Evaluate IT governance, risk management, and internal control frameworks (e.g., access controls, change management, data integrity)

• Perform risk assessments and identify control gaps, providing practical and actionable recommendations

• Review compliance with regulatory requirements, internal policies, and industry standards (e.g., ISO 27001, SOX, MAS TRM)

• Conduct audits on key areas such as cybersecurity, cloud environments, data management, and third-party/vendor risk

• Collaborate with business and technology stakeholders to understand processes and assess associated risks

• Prepare clear audit reports and present findings to senior management

• Support follow-up reviews to ensure timely remediation of audit findings

Requirements

• 3-8+ years of experience in IT audit, technology risk, or related fields (e.g., internal audit, consulting, Big 4)

• Strong understanding of IT controls, audit methodologies, and risk frameworks

• Familiarity with regulatory and compliance standards (e.g., SOX, ISO 27001, NIST, MAS TRM)

• Exposure to areas such as cybersecurity, cloud (AWS, Azure, GCP), data governance, and application controls

• Professional certifications such as CISA, CISSP, or CISM are preferred

• Strong analytical and problem-solving skills with attention to detail

• Good communication skills with the ability to engage both technical and non-technical stakeholders

• Ability to work independently and manage multiple audit assignments in a fast-paced environment