Senior Auditor - IT & Cybersecurity Audit

We are looking for an experienced Senior Auditor - IT & Cybersecurity to join a well-established organization with regional operations.

This role offers broad exposure across IT audit, cybersecurity, cloud, technology risk and governance, with opportunities to work on regional audit projects and engage with different technology and business stakeholders.

Key Responsibilities

• Plan and execute IT & Cybersecurity audit engagements across regional operations.
• Perform audits covering IT General Controls (ITGC), cybersecurity, network security, IAM/PAM, cloud security, data centre, technology governance and IT risk management.
• Conduct walkthroughs, control testing and data analysis to identify technology risks and control weaknesses.
• Review IT resilience and operational controls, including backup/recovery, DR/BCP, patching, configuration and infrastructure monitoring.
• Assess technology project and application controls covering SDLC, DevSecOps, CI/CD, change/release management and environment segregation.
• Review cloud environments including Azure, AWS, Microsoft 365, IaaS/PaaS/SaaS and hybrid infrastructure.
• Prepare clear audit findings and provide practical, value-added recommendations to management.
• Monitor remediation progress and conduct follow-up reviews on outstanding audit issues.
• Support multiple audit engagements concurrently and provide guidance to junior team members.
• Participate in regional/international audit assignments where required.

Requirements

• Degree in Information Systems, Computer Science, Cybersecurity, Accounting or a related discipline.
• Around 3-5 years of experience in IT Audit, Technology Risk, Technology Assurance or a related field.
• Strong hands-on experience in ITGC testing and technology control assessment.
• Good understanding of frameworks such as COBIT, ISO 27001/27002, NIST CSF, CIS Controls and/or ITIL.
• Knowledge of cybersecurity controls including IAM/PAM, network security, vulnerability management, security monitoring, incident response and data protection.
• Exposure to cloud technologies and cloud security would be highly advantageous.
• CISA, CISSP and/or CISM certification is preferred.
• Strong analytical, communication and stakeholder management skills.
• Able to work independently and manage multiple audit assignments.
• Willing to travel up to 30% regionally/internationally.

Why Join?

• Regional exposure across different business and technology environments.
• Broad audit coverage across IT, cybersecurity, cloud and emerging technology risks.
• Opportunity to work closely with senior technology and business stakeholders.
• Career development within a sizable and established organization.