Assistant vice president - it audit

The role reports to Section Head, IT Audit and will be responsible for leading and executing IT audits for the Great Eastern Group of Companies. You will also assist the Singapore Chief Internal Auditor, Group Internal Audit, to provide an independent and objective assurance to support the continuous enhancement of the Group’s IT governance, risk and compliance environment. This role partners closely with technology and business stakeholders to deliver high quality audit outcomes and drive a strong risk and control culture.

Audit Planning & Execution

• Lead or participate in the planning, scoping, and execution of IT audit assignments, ensuring high-quality deliverables and timely issuance of audit reports.
• Contribute to the development and refinement of the annual IT audit plan, incorporating emerging risks, regulatory expectations, and business priorities.
• Ensure audit coverage addresses relevant regulatory requirements, industry standards, and internal risk concerns.
• Identify control gaps and provide practical recommendations to strengthen IT governance, control design, and control effectiveness.

Integrated & Thematic Audits

• Partner with business audit teams to support integrated and thematic audit reviews by providing technology expertise.
• Assess the adequacy and effectiveness of IT controls supporting business processes and critical technology environments.

Ad-hoc Reviews & Special Projects

• Lead or participate in special reviews, investigations, and other ad‑hoc assignments as required by management.
• Support continuous monitoring activities to identify technology risk trends, emerging threats, and new areas of audit focus.

Stakeholder Management

• Build and maintain strong working relationships with technology and risk stakeholders, including Technology Risk Management, IT Risk and Compliance teams.
• Act as an advocate for risk awareness and sound control practices, positively influencing stakeholders toward strengthened governance and risk management behaviours.

Issue Tracking & Follow‑Up

• Coordinate with auditees on the timely remediation of audit findings, including issuing Audit Tracking Reports and validating the closure of corrective actions.

Quality & Standards

• Ensure adherence to internal audit methodology, operating procedures, and professional standards.
• Support preparation and compliance with Quality Assurance Reviews.

Continuous Improvement & Thought Leadership

• Stay abreast of emerging technologies, cybersecurity threats, regulatory updates, and industry trends to enhance audit effectiveness.
• Proactively identify potential risks and share best practices in risk management and control design across the organisation.

Have 8–10 years of relevant IT audit experience, including exposure to infrastructure, application, and cybersecurity audits. Hold a Degree in Computer Science or a related field, complemented by professional certifications such as CISA, CISM, CRISC, CISSP, or CCSP. Bring prior experience in the insurance or banking sector, with familiarity in technology risk management regulations across Singapore, Malaysia, and Indonesia considered an advantage. Demonstrate strong attention to detail to ensure accuracy, completeness, and quality audit coverage. Possess leadership qualities with the ability to lead, guide, and motivate a team of auditors. Exhibit strong report writing, communication, and presentation skills. Work effectively with stakeholders at all levels, displaying collaboration, professionalism, and a team‑oriented mindset. Are highly independent, with strong time management skills and the ability to deliver responsibilities with minimal supervision from the IT Audit Section Head. Conduct continuous monitoring of technology risk areas and actively engage technology control partners to stay current with the evolving IT risk landscape. Demonstrate a high level of integrity, accountability, and a positive attitude toward collaboration and teamwork. Show initiative, a continuous improvement mindset, and adaptability in a dynamic environment. Are self‑motivated, proactive, and comfortable driving enhancements in processes, risk assessment, and audit practices. Are willing to travel overseas when required and deemed safe, with an estimated travel commitment of up to 10%.