The Technology Auditor at GXS Bank will manage and execute audits related to IT and Technology, focusing on Cyber Security, Data Governance, and Risk Advisory. The role includes assessing risks, planning audits, documenting findings, and improving audit capabilities through data analytics. Strong communication skills and stakeholder management are essential.
Get to know our Team:
- Internal Audit is an independent function (3rd line of Defence) within GXS Bank that provides an objective assurance and advisory role to senior management.
- We use a systematic, disciplined risk-based approach to evaluate and assess risks, processes and internal controls, while aligning them to the Bank’s overall digital strategy.
- Internal Audit covers multiple businesses and technology functions within the Bank.
Get to know the Role:
- You report to the Head of Technology Audit at GXS Bank, which is part of the IT/Technology audit team.
- As an IT/Technology auditor, you are primarily responsible for executing all audits and risk advisory activities pertaining to IT/Technology (Applications & Infrastructure), Cyber Security, Data Governance & Engineering and Technology Products at GXS.
- We seek a candidate who brings expertise in Data Analytics and has practitioner experience in Cloud Computing and Security, coupled with audit and risk advisory experience to support the Technology Audit team, in a fast-paced and dynamic environment.
- You effectively plan, manage and execute audits, including the design of audit test steps to evaluate the risks associated with (but not limited to) governance, financial, operational, regulatory, and business continuity.
- You maintain well documented audit work papers including supporting documents/ evidence in the GRC system, which are subject to regular internal quality assurance review.
- You are able to execute and complete audit projects by adhering to audit methodology, key phases and assigned timelines.
- You keep abreast of MAS regulations on IT-related guidelines and cyber hygiene relating to FIs and banks.
- You are are able to lead initiatives on data analytics (rule-based/ ML) and familiar with data analytic tools (e.g. Python, Power BI & Tableau)
- You understand banking business and technology priorities (with associated emerging/ inherent/ residual risks), so as to translate them into automated audit test steps using data to enhance audit focus on control assessment and targeted sampling.
The day-to-day activities:
- Support the Head of Technology Audit as part of the Audit team.
- Plan and perform risk-based assessments, focusing on risks arising from the Technology, Cyber Security, Data Governance & Engineering areas.
- Execute audit reviews and fieldworks, including work paper documentation, drafting of audit findings and leading the issue discussion internally and with stakeholders.
- Assist to draft audit reports and participate in the presentation of audit findings.
- Ensure effective and timely execution of audit projects in accordance with audit methodology and timelines.
- You may be required to participate/ support in ad-hoc projects, special thematic reviews or special independent investigations.
- Build and maintain healthy relationships with different levels of management, stakeholders, and be a trusted risk advisor on control related matters.
- Actively participate in driving data analytics capabilities and maintenance of audit workflow system (i.e. GRC), so as to improve the effectiveness of Internal Audit.
The must haves:
- Bachelor's degree in Computer Science/ Information Systems (or equivalent) or higher from a globally recognized university
- Related certifications (i.e. CISA, CISSP, CIA, AWS certifications or similar) are preferred
- Minimum 8 years of experience with Data Analytics, Cloud Computing and Security, or audit experience in IT/ Technology, Information Management, Digital Channel and Cyber & Security Risk Management
- Strong knowledge of MAS Technology Risk Management (TRM) Guidelines, FSM-N05 and FSM-N06
- Highly competent with IT audit methodologies and concepts; including the agile audit methodology
- Good understanding of IT-related and technology products in the digital banking space.
- Familiar with emerging technologies and possess an interest to stay abreast of industry developments (e.g. DevOps, Cloud, APIs, service-oriented architectures etc).
- SME’s knowledge regarding technology application process/ control disciplines, consumer banking control processes, digital channels and products.
- An excellent team player
- Confidence in dealing with senior stakeholders particularly at the Management Committee and Board Audit Committee is a plus
- Able to work independently and possess the courage to challenge risk-decisions made by senior stakeholders, from a 3rd line of defence perspective
- Well-developed communication and interpersonal skills
- Good analytical, presentation and report writing skills
- Located in Singapore, and ability to travel for work when required is a plus
Top Skills
Python
GXS Bank Singapore Office
Singapore, Singapore
Similar Jobs
Aerospace • Industrial
The Digital Technology Audit Specialist will perform risk-based audits, assess risks in key business processes, and create process maps for digital technology and operational processes. The role includes preparing audit reports, presenting findings to senior management, developing automated testing procedures, and promoting continuous self-improvement within the technology audit team.
Top Skills:
CybersecurityIt
Artificial Intelligence • Cloud • Sales • Security • Software • Cybersecurity • Data Privacy
The Senior Solution Engineer will work with sales teams to support direct and indirect sales efforts, engaging with partners and customers to articulate the value of SailPoint solutions. This role requires expertise in identity management and excellent communication skills to understand customer requirements and demonstrate product capabilities. Achieving set milestones in the first year is essential for success.
Top Skills:
JavaLdapSQLXML
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
As a Cloud Incident Response Consultant at CrowdStrike, you will lead cloud incident response engagements, manage projects involving Azure, AWS, or GCP, and assist clients with threat actor activity. You'll perform forensic analysis, deliver technical assessments, and present findings to stakeholders. You should have expertise in cloud security and incident response methodologies, with strong communication skills to convey complex information effectively.
Top Skills:
AWSAzureGCP
What you need to know about the Singapore Tech Scene
The digital revolution has driven a constant demand for tech professionals across industries like software development, data analytics and cybersecurity. In Singapore, one of the largest cities in Southeast Asia, the demand for tech talent is so high that the government continues to invest millions into programs designed to develop a talent pipeline directly from universities while also scaling efforts in pre-employment training and mid-career upskilling to expand and elevate its workforce.
