The successful candidate will join SIA’s Internal Audit (IA) Division to provide independent and objective assurance to SIA Management and Audit Committee on the Groups IT governance, technology risk management (including cybersecurity) and control processes. The Principal Auditor (IT Infrastructure and Processes) will take a leading role in identifying, assessing and measuring technology-related risks.

Key responsibilities 

• Provide independent and objective assurance to SIA Management and Audit Committee on the Groups IT governance, technology risk management and control processes.
• Develop and maintain an IT Infrastructure (including cybersecurity) and processes audit universe for audit planning.
• Collaborate closely with the IT Division (ITD) to identify key infrastructure, IT process risks, and cybersecurity defences for inclusion in the IT audit universe.
• Execute the IT audit projects according to the approved annual audit plan on a timely basis, ensuring completion of the annual audit plan within the approved resources and budget. This includes conducting the opening and closing meetings with relevant stakeholders and tracking the recommendations until closure.
• Maintain high quality work papers and documentation for knowledge development and retention.
• Provide quarterly updates on IT audits issues for Audit Committee reporting and assist the internal audit leadership to prepare quality audit committee papers. 
• Provide IT advisory service to SIA Group to add value and improve the business processes. Serve as the go-to subject matter expert for IT infrastructure and process controls, providing advisory services sought by SIA business units. 
• Enhance IT audit digital techniques and tools (including analytics, automation, Gen AI) to increase efficiency and effectiveness of IT Audit services. 
• Provide technical training and mentorship to develop auditors’ IT audit capabilities and professional practices. 

Requirements

• Possess a university degree in related to information technology, information security, computer science, computer engineering or related fields 
• Professional IT certification in at least one area such as Certified Information Systems Auditor, Certified Information System Security Professional, Certified Cloud Security Professional, Certificate of Cloud Auditing Knowledge, Offensive Security Certified Professional is a must
• Preferably minimum 8 years of IT working experience with at least 4 years in IT audit
• Strong knowledge of IT governance, security and risk management, including, security architecture review, IT process analysis, enterprise risk management, IT application controls as well as leveraging on data analytics. Good understanding of ISO, NIST, ITIL and cybersecurity framework
• Deep understanding of multi-cloud environments & enterprise IT architecture design, operating systems (such as Windows and Unix) and command line tools, databases, network protocols, and cybersecurity solutions
• Proficient in programming/scripting such as PowerShell and Python
• Possess excellent project management and internal audit engagement management skills
• Keen interest in learning about emerging technologies, system vulnerabilities and technology trends, and actively pursuing knowledge  to maintain relevance in the rapidly evolving technological landscape
• Possess good written and communication skills, problem-solving and decision-making skills with an eye for details

We thank all candidates for your interest in Singapore Airlines, and regret that only shortlisted candidates will be notified.

LI-CH1