Role: IT GRC Director
Location: Ang Mo Kio
Type of Role: 12 months contract (Convertible to Permanent)
Remuneration: Base Salary
Responsibilities:
- Work closely with stakeholders as necessary to meet the quality objectives.
- Engage stakeholders in defining, monitoring, and reporting on the timeline for quality initiatives implementation.
- Set up governance at the service organization level to track, monitor, and report on the progress of quality initiatives and activities.
- Track and report on progress of quality initiatives and agreed metrics from various stakeholders centrally.
- Create quality awareness.
- Develop risk-based internal audit plan.
- Assess the design and operating effectiveness of internal controls in mitigating IT risks.
- Proficient in acknowledging service delivery challenges and presenting plans to resolve them.
- Able to surface out key quality issues to major stakeholders and work with stakeholders on remediation actions for timely intervention.
- Lead, perform audit work for IT Infrastructure and Security audits for Managed services (Operations) and gather evidence under the audit program within the timeline.
- Provide audit report covering audit findings, root cause and improvement recommendations.
- Present the audit findings to senior stake holders (both internally and to external clients).
- Continuously follow up with project teams until closure and ensure that they have addressed the root causes and taken necessary actions.
- Compile audit findings across different projects and analyze trending of audit findings and work with stakeholders to identify preventive and corrective measures.
Requirements:
- Minimum 8 to 10 years ICT experience working in IT Project Delivery Life Cycles (e.g. in Project Management, IT Infrastructure Managed services (e.g., Servers, Storage, Virtualization, Cloud, Network or Security (it does not have to be in every area but at least a couple.).
- At least 5 years in ICT audit and/or compliance management with professional qualifications such as CISA, CISM, CISSP, ISO 27001. Familiarity with AGO and government security requirements will be an advantage.
- Good understanding of IT management processes, technology risks and internal controls and ISO standard such as ISO 27001.
- Working experience in implementing Quality Assurance (QA), Quality Management (QM) Systems for Infrastructure services.
- Independent, pro-active and able to deliver quality and thorough audit work, with the eye for details.
- Team player & good interpersonal skills.
- Good written and verbal communication and presentation skills.
