R0363888 Principal Audit Manager – Technology Corporate & Investment Banking APAC – Vice President

Details of the Division and Team:

• As the Principal Audit Manager (PAM) for Technology – Corporate Banking (CB) and Investment Banking (IB) – APAC, you will report to the Chief Auditor (CA) for Technology – CB, IB, and Data, under the Head of Audit for TDI. This role oversees planning, staffing, risk assessment, and the complete delivery of the annual audit plan. The portfolio primarily covers APAC Investment and Corporate Banking Technology, as well as regulatory mandated audits across 14 countries in APAC, which include audits of IT Application General Controls and technology regulatory compliance. You will be leading a team of IT auditors based in Singapore, India, China, and the Philippines.
• For any findings in the portfolio, you will act as the primary relationship manager for senior IT management globally and work with other Group Audit IT PAMs to close findings sustainably.
• For this large portfolio, you will be supported by one Deputy PAM as well as by a dedicated and growing team under your leadership. You will develop further relevant technical expertise and contribute to enhancements of the audit approach.

Your key responsibilities:

• Manages the delivery of a portfolio of complex, global, and regional audits covering the IB & CB Technology in APAC, as well as regulatory requirements. Evaluates the adequacy and effectiveness of internal controls relating to the underlying risks, with high-quality audit reports and within agreed timelines.
• Performs risk assessments of established auditable areas and the annual audit planning exercise.
• Leads the preparation and coordination of regulatory submissions in APAC.
• Partners with other divisions/teams during audit engagements to guarantee an integrated approach.
• Reviews and provides expert opinions on action plans provided by stakeholders, helping them develop robust and sustainable remediation plans.
• Tracks audit findings for validation and acts as a competent partner and challenger to stakeholders in the closure process of findings.
• Holds primary responsibility for technology-related regulatory audits, inspections, and other submission requirements across 14 APAC countries. Represents GA-Technology during inspections and meetings with regulators.
• Attends regulatory mandates, DB IT Governance Forums, and communicates openly with divisional management and internal stakeholders, keeping them informed of potential issues and escalating problems/delays accordingly.
• Presents complex and sensitive messages (such as audit findings) comprehensively and professionally, reducing complex topics to simple statements.
• Proactively keeps abreast of pertinent industry, regulatory, and business practices, and can also lead discussions with regulators as required.
• Establishes and maintains a service/relationship approach with stakeholders to understand their business needs. Interprets stakeholder feedback on key business developments/risks and understands the clients’ marketplace to address their needs and expectations while delivering ‘one voice’ to the stakeholder in all communications and correspondence.
• Takes ownership of their own career management, seeking opportunities for continuous development of personal capability and improved performance contribution.
• Reinforces an environment where people management and development are a key priority.
• Provides regional oversight of all IT Auditors in APAC through direct onsite and remote, as well as matrix reporting lines. Acts as a role model for new employees, providing help and support to facilitate early integration and assimilation into the new environment.

Your skills and experience:

• At least 10 years of direct IT audit experience across various domains, such as: Information Security (IS), Information Technology (IT), IT production controls and processes (e.g., Change / Problem Management), including related frameworks (e.g., ITIL, COBIT), Banking and Transaction Processing Knowledge.
• Exposure to IB and CB or similar applications and technologies (e.g. SWIFT, e-trading platforms, digital payment systems, etc.), as well as robust knowledge of capital markets processing, with demonstrable experience in IT auditing in an investment banking context (e.g., audits of automated business controls).
• Experience in auditing IT applications supporting trading and the trade processing lifecycle F2B, including operations. Relevant instruments could include interest rate products, credit products, commodities, futures, and foreign exchange products. Knowledge of algorithmic and high-frequency trading processes would be beneficial.
• Expertise in auditing IT General Controls for applications and related IT infrastructure components.
• Comprehensive experience in risk-based auditing and a clear understanding of the relationship between IT risk and underlying business risk.
• Understanding of the banking regulatory environment.
• Proven stakeholder and people management skills, including remote team member management capabilities. Able to work in virtual, global teams in a matrix organization, transfer knowledge, and develop the capability of team members.
• Demonstrated analytical skills and structured thought process with the ability to clearly articulate control deficiencies and related risk. Flexible, proactive, and innovative mindset with strong organizational skills to take ownership and responsibility for agreed targets and deliver them within agreed budgets to enable a timely and efficient completion of audit projects.
• Ability to work under pressure, multi-task, and prioritize workload.
• Certifications such as CISA, CISM, CISSP, or equivalent qualification in the areas of information security, project management, or process/quality management would be an advantage, but not a must.
• Bachelor’s Degree preferably in a Technology-related field (or equivalent) from an accredited college or university (or equivalent) or equivalent work experience.

Role is required to be performed on-site at One Raffles Quay office. Relevant vaccination requirements may apply.