Job Description

Reporting to the Chief Audit Officer of the Office of Internal Audit (OIA), the incumbent will work closely with a team of auditors and co-sourcing service providers to carry out audit assignments covering a diverse range of IT systems, processes and controls.

Key Responsibilities

• Adopting a team based approach, collaborate with Financial and Operational Auditors to execute integrated audits; the incumbent to support IT risks areas.
  • Manage and work with co-sourced IT audit service providers to ensure their deliverables align with the University's audit objectives and standards.
  • Engage and collaborate with second-line functions (e.g., IT Security and Governance team, CISO unit, Office of Risk Management and Compliance) to ensure a cohesive approach to identify, assess, and mitigate IT-related and operational risks.

• • Plan and execute thematic IT systems audits and IT general controls audits and prepare audit reports with minimal supervision.
  • Effectively communicate audit observations and recommendations to stakeholders and conduct follow-up to ensure timely resolution of matters arising.
  • Proactively contribute to the enhancement and continuous improvement of the IT audit methodology and internal controls framework.
  • Stay informed of emerging IT risks and evolving technologies (e.g., cybersecurity, cloud computing, data analytics, AI), and provide actionable insights and recommendations to address identified risks.

Qualifications

• A university degree in Information Technology, Information Systems, Computer Science, or a related field.
• Professional certifications such as CISA (Certified Information System Auditor) or CISSP (Certified Information Systems Security Professional).

• At least 5 years of working experience in IT audit, preferably in MNC, public sector or higher education sector.
• Proven experience conducting independent audits across IT Infrastructure, IT General Controls, IT Application Controls, ERP systems and Cybersecurity domains.

• Strong knowledge of IT governance frameworks and best practices (COBIT, NIST-CSF, ISO 27001).
• Understanding of cloud infrastructure (e.g., AWS, Azure or Google Cloud) and its associated risks.
• Experience with IT risk assessment, controls evaluation, and regulatory compliance.

• Strong analytical, organizational, problem-solving, communication and reporting writing skills.
• High level of integrity, ethics, and professionalism in handling confidential information.

More Information

Location: Kent Ridge Campus

Employee Referral Eligible: Yes

 Job requisition ID : 25995