Senior Manager

at  DukeNUS Medical School

Posting Start Date: 09/01/2025
Job Description:

JOB DESCRIPTION

Reporting to the Chief Audit Officer of the Office of Internal Audit (OIA), the incumbent will work closely with a team of auditors and co-sourcing service providers to carry out audit assignments covering a diverse range of IT systems, processes and controls.

QUALIFICATIONS

• A university degree in Information Technology, Information Systems, Computer Science, or a related field.
• Professional certifications such as CISA (Certified Information System Auditor) or CISSP (Certified Information Systems Security Professional).
• At least 5 years of working experience in IT audit, preferably in MNC, public sector or higher education sector.
• Proven experience conducting independent audits across IT Infrastructure, IT General Controls, IT Application Controls, ERP systems and Cybersecurity domains.
• Strong knowledge of IT governance frameworks and best practices (COBIT, NIST-CSF, ISO 27001).
• Understanding of cloud infrastructure (e.g., AWS, Azure or Google Cloud) and its associated risks.
• Experience with IT risk assessment, controls evaluation, and regulatory compliance.
• Strong analytical, organizational, problem-solving, communication and reporting writing skills.
• High level of integrity, ethics, and professionalism in handling confidential information.

• Adopting a team based approach, collaborate with Financial and Operational Auditors to execute integrated audits; the incumbent to support IT risks areas.
• Manage and work with co-sourced IT audit service providers to ensure their deliverables align with the University’s audit objectives and standards.
• Engage and collaborate with second-line functions (e.g., IT Security and Governance team, CISO unit, Office of Risk Management and Compliance) to ensure a cohesive approach to identify, assess, and mitigate IT-related and operational risks.
• Plan and execute thematic IT systems audits and IT general controls audits and prepare audit reports with minimal supervision.
• Effectively communicate audit observations and recommendations to stakeholders and conduct follow-up to ensure timely resolution of matters arising.
• Proactively contribute to the enhancement and continuous improvement of the IT audit methodology and internal controls framework.
• Stay informed of emerging IT risks and evolving technologies (e.g., cybersecurity, cloud computing, data analytics, AI), and provide actionable insights and recommendations to address identified risks.