AVP, Audit Manager, Digital, Operations, and Technology Audit

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

 Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.

 We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.

Your Opportunity Starts Here.

Join OCBC to be part of a dynamic and forward-thinking organisation that values innovation and collaboration. In Group Audit, you’ll enjoy a unique perspective across the Bank, gaining insights into diverse functions while driving impactful change. It’s an opportunity to strengthen governance, assess risks, and contribute to the Bank’s resilience and OneGroup vision. With continuous learning opportunities, it’s a rewarding role for those passionate about making a difference.

To succeed in Group Audit at OCBC, one must combine critical thinking with a keen eye for detail. Build strong stakeholder relationships, ask the right questions, and challenge assumptions. Leverage data analytics for sharper insights and stay updated on emerging risks and trends. Managing multiple priorities, adapting to complex situations, and maintaining independence are key. Resilience and effective communication will help navigate challenges and deliver impactful, high-quality audit outcomes.

Audit Management

• Partner with business audit teams and lead the technology scope of integrated Consumer Banking and Private Banking audits, applying sound business and technology judgement to identify key technology risks, system dependencies and automated controls across business processes and customer journeys.
• Perform fieldwork to evaluate the design and operating effectiveness of application controls and assess whether Group-wide technology processes and controls are effectively implemented and operating within Consumer Banking and Private Banking applications.
• Contribute to the assessment of cyber threats, vulnerabilities, data protection practices, data governance and artificial intelligence, including AI model governance, to support audit conclusions.
• Apply advanced audit analytics to identify risk patterns, anomalies and control weaknesses, and enhance the depth and effectiveness of audit testing.
• Prepare clear and well-documented work papers and draft audit findings supported by sufficient audit evidence for review by senior auditors

Stakeholder Management

• Collaborate with stakeholders and senior leadership across the Group to effectively communicate audit findings and jointly develop risk mitigation and remediation plans.
• Build and maintain strong relationships with business units and provide advice on technology risk and control matters.
• Provide regular updates to the Group portfolio lead and DOTA leadership on audit progress, key challenges, and audit findings.

Team Management

• Lead a team of auditors assigned to Group audit engagements/reviews, providing guidance and oversight to ensure successful delivery.
• Prepare and review working papers for audits/reviews, ensuring that work is thoroughly documented and supported by evidence.
• Encourage the use of innovative tools and techniques, such as data analytics, and automation, to enhance audit efficiency and effectiveness.

Group Audit is all about oversight. Gaining experience of the bank in its entirety. Gathering insight. Building Risk and Controls expertise. Advising leadership. You might join us in Regulatory Capital Audit, Credit Risk Review, Investigation, Audit Methodology & Standards or Programme Management Office. But wherever you are, your work with clients from around the world drives innovation and makes audit an artform.

• University Degree in Computer Science or a related discipline.
• Professional certifications such as CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager) or CRISC (Certified in Risk and Information Systems Control) are highly preferred.
• At least 3 - 5 years of experience in technology audit, IT risk management, or related field, with experience in banking or financial services. Experience with consumer/ private banking strongly preferred.
• Ability to analyse complex business processes and identifying key risks and controls.
• Compliance and Regulatory knowledge - Understanding of relevant regulations and standards (e.g. MAS TRMG, Cyber Hygiene, CCoP, HKMA C-RAF and BNM RMiT)
• IT Risk Management - Skilled in identifying and assessing IT risks effectively.
• Audit Methodologies - Proficiency in audit techniques and methodologies, including risk-based auditing, control assessments, and continuous auditing.
• Data Analysis Skills - Proficient in analysing data and utilising analytics tools (e.g. KNIME, Power BI) to effectively assess IT controls.
• Good written and verbal communication skills, with the ability to articulate technical issues clearly and concisely.
• Strong team player with the ability to collaborate effectively with colleagues and stakeholders across functions.
• High level of integrity, drive, and sense of urgency.
• Willing to travel 10%-20% (primarily regional).

Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.