IT Audit - Senior Consultant / Manager

Job Scope:

• Perform IT audit, regulatory compliance assessment (e.g. MAS) and IT risk assessment, in areas covering IT general controls, application controls, business cycle and IT security review.
• Understand third party assurance framework (i.e. ISAE, SSAE, AICPA).
• Able to evaluate IT internal controls and identify opportunities for controls improvement.
• Able to Identify and evaluate complex technology and business risks and internal controls which mitigate risks, and related opportunities for internal control improvement. 
• Able to identify other areas of business initiatives and changes in the business environment and assess their impact on the business control environment.
• Experience in leading teams in performing IT audits and risk assessment assignments.
• Strong understanding of complex business and IT processes, and their related risks.
• Develop themselves by actively seeking opportunities for growth, shares knowledge and experiences with others, and acts as a strong brand ambassador.

Requirements: 

• Minimum 5 years and above of work experience in the field on IT Audit and/or Risk Assessment.
• Degree in Information Systems, Information Technology, Computer Science, Business Studies, Accounting or Cyber Risks or equivalent.
• Pursing or certified with certifications such as CIA, ISMS Lead Auditor, CISA, CEH, GPEN or GCIH is preferred, but we will sponsor the successful candidate to attain such certification
• Excellent Microsoft Office skills (i.e. pivot table, formula, formatting, charts & graphs etc.)
• Good understanding of ISAE 3402/3000, SSAE 3402/3000, SOC 1 and SOC 2, COSO, COBIT, ISO/IEC 27000, ISO 31000 or equivalent standards
• Good understanding of business and IT processes, general IT controls, with ability to recommend opportunities for controls improvements
• Working experience in Big Four audit firm would be added advantage.