Lead, Technology Audit

Nanyang Technological University, Singapore (NTU Singapore) is a premier technological university that develops leaders and creates societal impact through education, research, and service. Ranked amongst the world's top universities, NTU has 40,700 undergraduate and postgraduate students in the Business, Computing & Data Science, Engineering, Humanities, Arts, & Social Sciences, Medicine, Science, and Graduate colleges. The University aspires to shape an AI-enabled future. By bringing together global talent across disciplines and combining technology with human creativity, NTU nurtures AI-ready graduates, drives breakthrough discoveries, and forges partnerships that tackle the challenges of our time.

The Lead, Technology Audit is responsible for leading and developing NTU's Information Technology audit capability and providing independent assurance to the Audit & Risk Committee and senior management on the effectiveness of IT governance, cybersecurity, technology risk management, data governance, digital transformation initiatives, and IT controls across the University.

Key Responsibilities

• Develop and maintain the annual risk-based technology audit plan aligned with strategic, operational and cybersecurity risks.
• Build and lead NTU's technology audit capability, methodologies, tools and analytics.
• Lead audits covering IT governance, cybersecurity, infrastructure, cloud, enterprise applications, data governance and digital transformation.
• Assess identity and access management, Active Directory, privileged access, incident response, vulnerability management, business continuity and disaster recovery controls.
• Review major technology projects and enterprise systems.
• Audit AI, machine learning, and advanced analytics initiatives where applicable.
• Utilize data analytics and continuous auditing techniques to enhance audit effectiveness and promote the use of technology-enabled auditing across Internal Audit.
• Assess technology risks supporting research activities, laboratories, high-performance computing environments, and research data management.
• Build strong working relationships with CIO and the IT leadership team.
• Present audit findings and key technology risks to senior management and the Audit & Risk Committee.

People Management Responsibilities

• Lead and coach technology auditors and co-sourced specialists.
• Develop technical competencies within Internal Audit.
• Manage external consultants and subject matter experts.

Qualifications

• Degree in Information Systems, Computer Science, Information Security, Accounting or related discipline.
• CISA, CIA, CISM, CISSP, CRISC, CA or CPA preferred.
• Master's degree preferred.

Experience

• Minimum 12-15 years of IT audit, cybersecurity or technology risk experience.
• At least 5 years in a leadership role.
• Experience auditing complex technology environments and digital transformation initiatives.

Technical Knowledge

• COBIT
• NIST Cybersecurity Framework
• ITIL
• COSO
• Cloud platforms (Azure, AWS, Google Cloud)
• ERP systems and Identity & Access Management

Key Competencies

• Strategic Thinking
• Technology Risk Management
• Cybersecurity Assurance
• Executive Presence
• Stakeholder Management
• Communication and Report Writing

Success Measures

• Robust risk-based IT audit programme established and executed.
• Material IT and cybersecurity risks independently assessed.
• Audit recommendations implemented and improving controls.

We regret to inform that only shortlisted candidates will be notified.