Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.
We are looking for an experienced IT Audit Manager to join us!
A senior position may be offered, subject to the candidate's years of experience and performance in the interview assessment.
A brief summary of your job responsibility:
- Develop and customise audit programmes/security audit checklists to assess the design and operating effectiveness of internal controls in mitigating IT risks.
- Lead, plan, develop and conduct annual policy compliance and process audits, and technical audits on critical systems and infrastructure.
- Manage agency interactions, including briefings, conduct of audit fieldwork, management responses, and follow-up actions to ensure on-time and on-target execution of audit plans.
- Review audit findings and assess agencies’ and Whole-of-Government overall state of ICT governance and risks.
- Formulate mitigation plans to improve the state of overall ICT governance.
- Work with multiple agencies at the working and management levels to assess the current situation and identify recommendations to address the gaps.
- Monitor and validate audit findings to ensure control remediation is effective and root causes have been addressed.
- Plan, source, and actively manage outsourced augmentation of internal capability, to deliver the committed deliverables.
- Perform ICT&SS audits of Government agencies determined by the Audit and Compliance Division of GovTech;
- Perform In-depth audit of Government agencies’ ICT&SS processes/applications/supporting infrastructure and systems
- Perform follow-up audit (FUPA) of past audit findings of Government agencies determined by ACD; import audit findings into the central repository.
- Perform any other related services which may be required by IA to carry out the ICT&SS audit.
Requirements
- With at least 6 years of working experience with a solid record in IT Audit
- Prior experiences in leading an end-to-end IT Audit.
- Strong security background (understanding risk assessment, legal & regulatory requirements, threats, vulnerabilities, security policies etc.)
- Experience in performing audits for compliance with COBIT framework and ITIL practices.
- Familiarity with IM8 or equivalent ICT policies is plus
- Performed security assessments benchmarked against common security standards such as NIST 800-53 or ISO 27001
- Prior experience in Application Development and Cloud are preferred but not mandatory
- Good communication & interpersonal skills.
- Excellent stakeholder management, influencing & planning skills.
- Possess CISSP/CISA/CISM, or other relevant cybersecurity qualification.
Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!
The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now".
We thank you for your interest and please note that only shortlisted candidates will be notified.
By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: https://www.assurity.sg/privacy.html or such other successor site.
Benefits
- We promote a learning culture and encourage you to grow and learn.
- Annual Leave Benefits with additional perks such as Family Care and Birthday Leave.
- Working in a collaborative environment with helpful team members
.png){kind=logo}
