Senior IT Audit Associate (GRC)

About the role

We are seeking an experienced Senior IT Auditor to strengthen our clienteles' technology governance, risk and regulatory compliance framework. This role requires you to travel overseas frequently to conduct security assessments. The successful candidate will play a key role in driving governance improvements and maintaining alignment with regulatory requirements set by the Payment Cards Industry Security Standards Council (formed by MasterCard, Visa, Amex, JCB & Discover).

Key responsibilities

• Conduct internal and external pre-audit assessments and attestation-based / certification audits across various PCI programs involving payment systems, card vendors environment, and IT infrastructure
• Take responsibility for planning and executing audits, including drafting of audit issues and audit reports
• Ensure that assigned audit work is executed in an efficient and effective manner, clearly documented, within the given budget and timeline, and in line with Audit methodology standards
• Drive responses to regulatory reviews, external audits and industry compliance requirements, including PCI CPP, PCI DSS, SWIFT and VAPT related assessments
• Promote secure and compliant data management practices across business and technology functions
• Support continuous enhancement of the organisation's technology governance framework and undertake other strategic initiatives as required
• Support and deliver CSA Cyber Essentials Mark, and Cyber Trust Mark readiness and implementation engagements
• Undergo industrial professional certifications to be a certified auditor in the training roadmap

About you

• Bachelor's degree in Information Technology or a related technical field with at least 8 years of related working experience
• Certified CISA, CISM, ISMS, GSNA, ISO 27001, ACCA, CIMA or IIA(CIA) is a must
• Advanced analytical skills to interpret technical data, identify patterns, and draw evidence-based conclusions
• Strong written and verbal English communication skills to document and present audit findings effectively
• Frequent overseas traveling is required for audit assignments
• Required to sign a training bond for the external industry-related courses, certifications and industrial training provided

About us

Founded in 2004, AGES possesses extensive experience collaborating with prominent payment brands such as MasterCard International, Visa International, American Express Company, and UnionPay International on compliance assessments. We offer comprehensive audit services, including Payment Card Industry (PCI) Card Production and Provisioning (CP), PCI Data Security Scheme (DSS), PCI 3D Secure (3DS), PCI P2PE / Token Service Provider (TSP), SWIFT Customer Security Program (CSP), ISO security programs, and other relevant standards.