Industry: IT Support and Networking
Location: Singapore
Job Description:
JOB PURPOSE:
Evaluate effectiveness and efficiency of the IT processes, and ensure compliance with the Group’s IT polices, standards and guidelines.
Identify control weaknesses in IT systems and make value-added recommendations for improvements.
Duties and Responsibilities:
(a) Internal Audit
Perform risk assessment of group-wide IT systems and processes to formulate annual internal audit plan.
Plan and execute IT audits in accordance with approved annual plan to provide assurance that controls in IT systems and processes are adequate and operating well.
Recommend practical solutions to tighten the control gaps or weaknesses and to follow-up on audit recommendations to ensure they are implemented and resolved
(b) J-Sox
Perform J-Sox assessment (for IT General Controls & IT Application Controls) in accordance with annual J-Sox plan
Document J-Sox assessment in standard working papers for all phases of J-Sox (DEA/OEA/roll-forward)
Coordinate with GHQ/external stakeholders on J-Sox assessments and results/findings (if any),
Liaise with external auditor for J-Sox assessment and ensure any deficiencies are remediated on a timely basis
(c) Data analytics
Assist to implement data analytics procedures and software to enable review of voluminous transaction and support continuous monitoring going forward.
Train IA team in use of data analytical tools/software
Requirements:
Certifications in CIA/CISA/CISM/CISSP or its equivalent
Highly competent with IT audit methodologies and concepts, including COSO (Committee of Sponsoring Organization) and COBIT (Control Objectives for information and related technology)
Degree in Business, Engineering, Information Technology (IT) or related disciplines with IT focus
Demonstrate capability in managing IT audit assignments independently while working as a core member of the Internal Audit team
Good analytical skill and report writing skill
Good interpersonal and communication skills
At least 8 years of audit experience with accounting firms and/or as an internal auditor with established listed companies or MNCs