Total 6 audit assistant job vacancies in Accounting / Auditing category in Singapore

Working closely with the Group Internal Audit team, the manager will provide value-adding independent audit services to the Audit Committee, Group Office, senior management and the regulator on the company’s capacity to manage risk and to provide reasonable assurance that the system of internal controls, as designed, is achieving its objectives.

We are looking for an experienced Internal Audit Manager who is able to liaise with AIA key parties such as the Audit Committee, Group Office, senior management and the regulator on the company’s capacity to lead audit projects seamlessly

Responsibilities:

• Plan, lead/support and implement audits within the organization in accordance with the annual audit plan approved by the Group and Local Audit Committee. Ensure that the working papers, draft audit reports and other deliverables meet internal standards and assignments are completed within budgeted time.
• Communicate the results of audits and other assignments via written reports and oral presentations, and provide professional advice and insights in order to enable informed management decisions.
• Build relationship with senior leaders and work with them to contribute and address issues on risk exposures and controls.
• Liaise with external auditors and regulatory inspectors on audit related matters.
• Whenever required and at Group Internal Audit’s request, to undertake audit assignments outside Singapore and also special investigation projects.

Requirements:

• Minimum Bachelor degree in Accounting or Commerce
• Qualified accountant: CA, CPA or equivalent
• Minimum seven years of internal/external audit experience in the insurance, financial or a related industry with supervisory working experience
• Superior knowledge of audit methodologies and audit-related application
• Strong understanding / experience in the insurance industry
• Hands on experience in audit planning and control requirements
• Proven governance and control philosophy
• Hands on experience in data analytics tools, scripting as well as all data analysis and visualisation functions would be an advantage.
• Ability to connect with all levels of management, local and Group, and external parties as appropriate.
• Strong leadership, project management and organisation skills.
• Excellent analytical, written/verbal communication, presentation, interpersonal, and relationship building skills.
• Solid problem solving skills, ability to analyse complex data, identify core issues, investigate, evaluate and reach appropriate conclusions.
• Ability to work under pressure and meet milestones within time, cost and quality constraints.
• Works well in a team environment

In this role, you will provide value-adding independent audit services to the Audit Committee, Group Office, senior management and the regulator on the company’s capacity to manage risk and to provide reasonable assurance that the system of internal controls, as designed, is achieving its objectives.

What you'll be doing:

• Assist in the development of the annual risk-based IT audit plan by assessing the key risks at the Local Business Unit and inputs from Group Office.
• Plan, lead/support and execute IT audits within the organization in accordance with the annual audit plan approved by the Group and Local Audit Committee. Review and co-ordinate the work of the team members and ensure that the working papers, draft audit reports and other deliverables meet internal standards and assignments are completed within budgeted time.
• Build audit relationship with key IT Management via regular interaction so as to be informed of emerging risk issues and other key changes.
• Communicate the results of IT audits and other assignments via written reports and oral presentations and provide professional advice and insights in order to enable informed management decisions.
• Follow-up outstanding audit issues and monitor timely completion of agreed remedial actions by management.
• Build relationship with senior leaders and work with them to contribute and address issues on risk exposures and controls.
• Liaise with external auditors and regulatory inspectors on IT audit related matters.
• Whenever required and at Group Internal Audit’s request, to undertake IT audit assignments outside Singapore.

What we are looking for:

• University graduate in IT or Computer Science or equivalent.
• Minimum 10 years of IT audit or other relevant experience (e.g. IT risk/security management or information security tools implementation experience), preferably with regional experience.
• Certificate holder of Certified Information Systems Security Professional (CISSP) and/or Certified Information Systems Auditor (CISA) and/or Certified Information Security Manager (CISM) with good understanding in IT controls and risks.
• Demonstrable experience in IT infrastructure, Cybersecurity, application control, system development process and/or business continuity management.
• Knowledge and experience in Cloud Computing is an advantage.
• Superior knowledge of audit methodologies and audit-related application.
• Hands on experience in audit planning and control requirements.
• Proven governance and control philosophy.
• Hands on experience in data analytics tools, scripting as well as all data analysis and visualization functions would be an advantage.

Position Objective:

Identifies and evaluates potential information security risks and ensures their corresponding risk exposures are appropriately addressed such that the company’s image and value are protected. Lead the information security team and advise senior management on information security trends to drive cyber security roadmap and enhance our cyber security readiness for the current cyber landscape and uplift the capabilities to tackle the future emerging cyber risks.

Key Responsibilities:

Information Security and Governance Management

Advances the overall Information Security and technology risk posture of the company, embedding risk culture and programs to secure the IT environment through policy governance, innovative security solutions, process and controls and initiatives, training and awareness programmes, and risk reviews.

Information Security Governance

Establishes cyber risk strategy, administer technology policies and processes, deliver awareness programs and provides risks advisory.

Technology Risk Assurance & Compliance

Manage the IT Compliance and Risk Assurance function to embed ensure department compliance to various regulations, policies, procedures and standards through risk-controls assessments, deviation handling and proper closure to all outstanding issues.

Application Security

Identifies and evaluates application security risks and ensures the applications are designed and developed securely meeting all the Enterprise application security standard and regulatory requirements, identified information security risks are appropriately addressed before system go-live.

Information Security Operations

Manage the outsourced operational IT security to ensure high levels of integrity, confidentiality, and availability of IT resources, thus being timely and effective in meeting business and regulatory needs.

Puts in place the structure in place to manage cyber security operations and respond effectively to cyber security incidents in a timely manner.

Software Quality Assurance

Ensure compliance to the quality processes (QP) in the systems supporting AIA Singapore through appropriate guidance, controls, and reviews in the SDLC framework.

Budgetary or Financial Control

Responsible for budget of Information Security and Governance unit.

Others

· Downward trend in internal audit overall assessments – reduction in Needs Major Improvements.

· Downward trend in PwC ICFR audit assessments

· Downward trend in security incidents and less DP incidents

· Uplift Cyber Security process, controls, and maturity level

· Support for the Cyber Security score in the annual MAS CRAFT report

· Performs other responsibilities and duties periodically assigned by CTO to meet operational and/or other requirements.

At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone.

It’s about finding new ways to not only better people's lives, but to better the communities and environments we live in. Encompassing our ambition of helping a billion people live Healthier, Longer, Better Lives by 2030.

And to get there, we need ambitious people who believe in playing an important part in shaping that future. People seeking unmatched career and personal growth opportunities, who are driven to work with, and learn from some of the most inspiring and supportive leaders in the business.

Sound like you? Then read on.

JOB DESCRIPTION SUMMARY

This position is responsible for providing consultation and professional advice on key technology and information security risk matters relating to the abovementioned geographical responsibilities, thereby adding value to building a strong information security risk culture centred on people, processes and technology. The role will also coordinate regular governance review engagements and being involved in technology-related audit engagements for the abovementioned geographical locations. The role requires professional judgment and assessments on material to be provided by the various process and control owners for the audits.

WHAT YOU’LL BE DOING

Risk Assessments, Audit and Regulatory Management

• Facilitate and drive Technology related audit engagements with statutory auditor and regulator, following up with relevant parties to ensure all issues identified are remediated
• Facilitate and drive annual IT risk and control self-assessment exercises according to MAS regulatory notices/guidelines, internal enterprise IT policies, and standards
• Coordinate independent reviews of the entities’ compliance against various information security and technology risk regulations such as MAS TRM Guidelines, MAS 132 Notice on Cyber Hygiene and MAS 127 Notice on TRM for AIA Singapore, as well as Brunei technology risk regulations for AIA Brunei.
• Support in the divisions’ risk and controls assessment exercises, as well as quarterly internal controls for financial reporting controls assessments
• Support the assurance initiatives under the First Line of Defense to uplift the technology and cyber controls landscape for the Company

Information Security & Technology Risk Metrics

• Support the alignment of various information security and technology risk metrics for management reporting and escalation – this includes reporting/escalation of outstanding or overdue action required from penetration tests, vulnerability assessments, security incidents, policy/standards deviations, third party security assessments, etc.
• Review and assess collated metrics and material for consistency checks and trends

Policy, Standards and Exception Management

• Communicate material changes to internal policies/standards to stakeholders Facilitate risk evaluations and exception handling to deviations from the policies, standards and regulatory requirements

Risk & Compliance Initiatives

• Assist in enterprise-wide risk and compliance coordination for Technology division, where applicable
  

WHAT WE ARE LOOKING FOR

• Bachelor’s Degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems)
• 5-10 years of relevant work experience, including at least 3 years of experience in IT audit, risk management, compliance and/or governance roles, with particular expertise and knowledge of governance reporting of technology risk issues and cybersecurity
• Work experience in financial industry, big tech firms or established auditing firms will be considered favorably

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone.

As pioneering innovators for over 100 years, we’re now transforming our organisation to be faster, simpler and more connected. Because we want to be even better equipped to develop digital solutions and experiences that help more people live Healthier, Longer, Better Lives.

To get there, we need people with tech/digital/analytics expertise and passion to help develop positive, sustainable change through digitally enhanced experiences that will impact the lives of millions of people and create a healthier future for everyone.

If you believe in developing a better tomorrow, read on. 

About the Role

This position is responsible for providing consultation and professional advice on key technology and information security risk matters relating to the abovementioned geographical responsibilities, thereby adding value to building a strong information security risk culture centred on people, processes and technology. The role will also coordinate regular governance review engagements and being involved in technology-related audit engagements for the abovementioned geographical locations. The role requires professional judgment and assessments on material to be provided by the various process and control owners for the audits.

Risk Assessments, Audit and Regulatory Management

• Facilitate and drive Technology related audit engagements with statutory auditor and regulator, following up with relevant parties to ensure all issues identified are remediated
• Facilitate and drive annual IT risk and control self-assessment exercises according to MAS regulatory notices/guidelines, internal enterprise IT policies, and standards
• Coordinate independent reviews of the entities’ compliance against various information security and technology risk regulations such as MAS TRM Guidelines, MAS 132 Notice on Cyber Hygiene and MAS 127 Notice on TRM for AIA Singapore, as well as Brunei technology risk regulations for AIA Brunei.
• Support in the divisions’ risk and controls assessment exercises, as well as quarterly internal controls for financial reporting controls assessments
• Support the assurance initiatives under the First Line of Defense to uplift the technology and cyber controls landscape for the Company

Information Security & Technology Risk Metrics

• Support the alignment of various information security and technology risk metrics for management reporting and escalation – this includes reporting/escalation of outstanding or overdue action required from penetration tests, vulnerability assessments, security incidents, policy/standards deviations, third party security assessments, etc.
• Review and assess collated metrics and material for consistency checks and trends

Policy, Standards and Exception Management

• Communicate material changes to internal policies/standards to stakeholders Facilitate risk evaluations and exception handling to deviations from the policies, standards and regulatory requirements

Risk & Compliance Initiatives

• Assist in enterprise-wide risk and compliance coordination for Technology division, where applicable

#LI-SC1

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

FIND YOUR 'BETTER' AT AIA We don't simply believe in being 'The Best'. We believe in better - because there's no limit to how far 'better' can take us. We believe in empowering every one of our people to find their 'better' - in the work they do, the career they build, the life they live and the difference they make. So that together we can support even more people - including our own - to live Healthier, Longer, Better Lives. If you believe in better, we'd love to hear from you. About the Role Working closely with the Group Internal Audit team, the manager will provide value-adding independent audit services to the Audit Committee, Group Office, senior management and the regulator on the company's capacity to manage risk and to provide reasonable assurance that the system of internal controls, as designed, is achieving its objectives. WE ARE LOOKING FOR... An experienced Internal Audit Manager who is able to liaise with AIA key stakeholders such as the Audit Committee, Group Office, senior management and the regulator on the company's capacity to lead audit projects seamlessly WHAT YOU'LL BE DOING Plan, lead/support and execute audits within the organization in accordance with the annual audit plan approved by the Group and Local Audit Committee. Ensure that the working papers, draft audit reports and other deliverables meet internal standards and assignments are completed within budgeted time. Communicate the results of audits and other assignments via written reports and oral presentations, and provide professional advice and insights in order to enable informed management decisions. Build relationship with senior leaders and work with them to contribute and address issues on risk exposures and controls. Liaise with external auditors and regulatory inspectors on audit related matters. Whenever required and at Group Internal Audit's request, to undertake audit assignments outside Singapore and also special investigation projects. WHAT WE ARE LOOKING FOR Minimum Bachelors degree in Accounting or Commerce Qualified accountant: CA, CPA or equivalent Minimum seven years of internal/external audit experience in the insurance, financial or a related industry with supervisory working experience Knowledge Superior knowledge of audit methodologies and audit-related application Strong understanding / experience in the insurance industry Hands on experience in audit planning and control requirements Proven governance and control philosophy Hands on experience in data analytics tools, scripting as well as all data analysis and visualisation functions would be an advantage. Other Skills Ability to communicate with all levels of management, local and Group, and external stakeholders as appropriate. Strong leadership, project management and organisation skills. Excellent analytical, written/verbal communication, presentation, interpersonal, and relationship building skills. Solid problem solving skills, ability to analyse complex data, identify core issues, investigate, evaluate and reach appropriate conclusions. Ability to work under pressure and meet milestones within time, cost and quality constraints. Ability to adapt to changes quickly and multi-task. Works well in a team environment #LI-SC1 ABOUT AIA For over a century, AIA has served the ever-changing needs of our customers across Asia-Pacific. Our Purpose to help millions of people live Healthier, Longer, Better Lives is at the heart of everything we do. As pioneering innovators, we're now transforming AIA to be faster, simpler and more connected to create better solutions and impactful experiences for our customers and communities. AIA encourages and enables our people to act with clarity, courage and humanity in service of our Purpose. JOIN US At AIA, we believe in empowering every one of our people to find their 'better' - in the work they do, the career they build, the life they live and the difference they make. Whether it's investing better wellbeing, inspiring better learning, building better relationships, or making a better impact on customers, a career at AIA will challenge you to find new ways to pursue your 'better'. AIA is committed to building a vibrant, diverse, and inclusive workforce for all employees to thrive in. Join us if you believe in creating a better tomorrow! Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives. You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.