About the Role

We are seeking an experienced IT Audit professional to join the Group Internal Audit function of a leading regional financial services organisation. The role will provide independent and objective assurance over IT governance, technology risk, cybersecurity, and internal controls across the Group.

The successful candidate will lead end-to-end IT audit engagements and provide insights and recommendations to strengthen the organisation's technology risk management and overall control environment.

Key Responsibilities

• Lead and execute end-to-end IT audit engagements, including audit planning, scoping, fieldwork, control assessment, reporting, and follow-up activities.

• Support the development and enhancement of the annual IT audit plan by assessing emerging technology risks, regulatory developments, business priorities, and changes in the technology landscape.

• Evaluate IT governance, infrastructure, applications, cybersecurity, and technology controls to assess their design, operating effectiveness, and alignment with internal policies and regulatory expectations.

• Identify control weaknesses and risk gaps, providing practical and value-added recommendations to improve control design, effectiveness, and overall risk management.

• Provide IT audit expertise for integrated, thematic, and business process audits, particularly where technology controls underpin key business processes.

• Conduct ad-hoc reviews, investigations, continuous monitoring, and targeted assessments in response to emerging technology risks or management requirements.

• Build effective relationships with senior stakeholders and technology teams, communicating audit observations and influencing improvements in risk and control practices.

• Monitor and validate the timely remediation of audit findings, ensuring issues are appropriately addressed and audit quality standards are maintained.

Requirements

• 8–10 years of relevant IT Audit experience, with strong exposure to infrastructure, application, cybersecurity, and technology risk audits.

• Degree in Computer Science, Information Technology, or a related discipline.

• Professional certifications such as CISA, CISM, CRISC, CISSP, or CCSP are highly advantageous.

• Previous experience within the banking, insurance, or broader financial services sector.

• Good understanding of technology risk management, IT governance, cybersecurity, and regulatory requirements across Singapore, Malaysia, and/or Indonesia.

• Strong understanding of IT control frameworks, risk assessment, audit methodologies, and regulatory expectations.

• Demonstrated ability to lead audit engagements and guide or mentor other auditors.

• Strong report writing, presentation, communication, and stakeholder management skills.

• High level of attention to detail with the ability to independently manage multiple audit assignments and deliver quality outcomes within agreed timelines.

• Strong integrity, accountability, independence, and professional judgement.

• Comfortable engaging with stakeholders across different levels of seniority and functions.

• Willingness to travel regionally when required, with travel expected to be approximately 10%.

What You Can Expect

• Opportunity to work within a regional Group Internal Audit function.

• Exposure to a broad technology environment covering infrastructure, applications, cybersecurity, IT governance, and emerging technology risks.

• Regional exposure across multiple markets and business operations.

• Opportunity to engage with senior technology and business stakeholders and contribute to strengthening enterprise-wide technology risk management.

• A role that combines hands-on IT audit delivery, stakeholder engagement, risk advisory, and leadership responsibilities.

Assistant Vice President, IT Audit