Total 2 it support executive job vacancies in Accounting / Auditing category in Singapore

In this role, you will provide value-adding independent audit services to the Audit Committee, Group Office, senior management and the regulator on the company’s capacity to manage risk and to provide reasonable assurance that the system of internal controls, as designed, is achieving its objectives.

What you'll be doing:

• Assist in the development of the annual risk-based IT audit plan by assessing the key risks at the Local Business Unit and inputs from Group Office.
• Plan, lead/support and execute IT audits within the organization in accordance with the annual audit plan approved by the Group and Local Audit Committee. Review and co-ordinate the work of the team members and ensure that the working papers, draft audit reports and other deliverables meet internal standards and assignments are completed within budgeted time.
• Build audit relationship with key IT Management via regular interaction so as to be informed of emerging risk issues and other key changes.
• Communicate the results of IT audits and other assignments via written reports and oral presentations and provide professional advice and insights in order to enable informed management decisions.
• Follow-up outstanding audit issues and monitor timely completion of agreed remedial actions by management.
• Build relationship with senior leaders and work with them to contribute and address issues on risk exposures and controls.
• Liaise with external auditors and regulatory inspectors on IT audit related matters.
• Whenever required and at Group Internal Audit’s request, to undertake IT audit assignments outside Singapore.

What we are looking for:

• University graduate in IT or Computer Science or equivalent.
• Minimum 10 years of IT audit or other relevant experience (e.g. IT risk/security management or information security tools implementation experience), preferably with regional experience.
• Certificate holder of Certified Information Systems Security Professional (CISSP) and/or Certified Information Systems Auditor (CISA) and/or Certified Information Security Manager (CISM) with good understanding in IT controls and risks.
• Demonstrable experience in IT infrastructure, Cybersecurity, application control, system development process and/or business continuity management.
• Knowledge and experience in Cloud Computing is an advantage.
• Superior knowledge of audit methodologies and audit-related application.
• Hands on experience in audit planning and control requirements.
• Proven governance and control philosophy.
• Hands on experience in data analytics tools, scripting as well as all data analysis and visualization functions would be an advantage.

Position Objective:

Identifies and evaluates potential information security risks and ensures their corresponding risk exposures are appropriately addressed such that the company’s image and value are protected. Lead the information security team and advise senior management on information security trends to drive cyber security roadmap and enhance our cyber security readiness for the current cyber landscape and uplift the capabilities to tackle the future emerging cyber risks.

Key Responsibilities:

Information Security and Governance Management

Advances the overall Information Security and technology risk posture of the company, embedding risk culture and programs to secure the IT environment through policy governance, innovative security solutions, process and controls and initiatives, training and awareness programmes, and risk reviews.

Information Security Governance

Establishes cyber risk strategy, administer technology policies and processes, deliver awareness programs and provides risks advisory.

Technology Risk Assurance & Compliance

Manage the IT Compliance and Risk Assurance function to embed ensure department compliance to various regulations, policies, procedures and standards through risk-controls assessments, deviation handling and proper closure to all outstanding issues.

Application Security

Identifies and evaluates application security risks and ensures the applications are designed and developed securely meeting all the Enterprise application security standard and regulatory requirements, identified information security risks are appropriately addressed before system go-live.

Information Security Operations

Manage the outsourced operational IT security to ensure high levels of integrity, confidentiality, and availability of IT resources, thus being timely and effective in meeting business and regulatory needs.

Puts in place the structure in place to manage cyber security operations and respond effectively to cyber security incidents in a timely manner.

Software Quality Assurance

Ensure compliance to the quality processes (QP) in the systems supporting AIA Singapore through appropriate guidance, controls, and reviews in the SDLC framework.

Budgetary or Financial Control

Responsible for budget of Information Security and Governance unit.

Others

· Downward trend in internal audit overall assessments – reduction in Needs Major Improvements.

· Downward trend in PwC ICFR audit assessments

· Downward trend in security incidents and less DP incidents

· Uplift Cyber Security process, controls, and maturity level

· Support for the Cyber Security score in the annual MAS CRAFT report

· Performs other responsibilities and duties periodically assigned by CTO to meet operational and/or other requirements.