Job Description

Business Function

DBS Group IT Audit is setting the standard to audit the future of banking technology. Our 3-function IT audit team consists of Digital & Banking Technology, IT Infrastructure and Cyber Security. This position is open in the Infrastructure team in Singapore. The candidate is responsible for end to end audits, track audit issue closure, validate control effectiveness post remediation, continuous monitoring of the IT landscape, writes and speaks well at all levels. Candidate will also support the audit function in continuous auditing activities to improve effectiveness and efficiency of the IT audit function. As Singapore is the Head Office to DBS Group, some travelling can be expected in this role.

Responsibilities

Infrastructure systems and processes form the backbone of our bank. As an infrastructure auditor, you will assess key IT processes such as system/network security management, identity & access management and IT Operations.

• Develop IT audit strategy and manage the audit plan and resources
• Lead and/or undertake audit projects to provide reliable and independent assurance
• Identify and assess potential risks in accordance with current regulatory and statutory requirements
• Establish and build relationships with senior stakeholders to educate the business in the control framework and influence business processes
• Define and develop Continuous Auditing requirements
• Supervise and coach team members

Requirements

Qualification & Experience

• Degree in Information Technology
• Professional certification in CISA/CISSP/CEH/CCSP
• More than 10 years of relevant experience in Information Technology
• Practical hands-on experience in performing independent security assessment to IT infrastructure and application
• Demonstrate strong understanding of the cyber security controls, operations and well-versed in the areas of application security
• Ability to interpret cyber security vulnerabilities and provide recommendations according to industry security best practices
• Knowledge of cyber-related government regulations (MAS, CSA, HKMA, RBI, FSI, etc) and compliance will be an advantage

Technical Knowledge

• Digital Banking delivery channel adoption:

• Internet, web hosting, mobile, Wi-Fi, multi-channel distribution
• Mobile application development
• Cloud Security
• Cyber Security:

• Malwares, attacks & defences
• Biometrics
• Security operations & surveillance
• Vulnerability assessment / Penetration testing
• Source code review
• Infrastructure security & processes:

• Network devices (e.g. firewalls, switches and routers)
• System & database platforms (e.g. Wintel, Unix, Mainframe, Oracle, MS SQL)
• IT processes (e.g. Data Centre Operations, Change Management, Incident Management)
• Authentication & authorisation controls:

• Multi-factor authentication
• Biometric technology

Business Analyst Skills

• Banking product domain knowledge:

• Treasury and markets, securities, finance, risk management and Islamic Banking
• Institutional Banking and Global Transaction Services
• Consumer Banking and Wealth Management
• User requirements understanding
• Application release functionalities validation
• Security / control design assessment
• Regulatory compliance
• Data Analytics
• Risk assessment particularly in regard to assessing the probability and impact of an internal control weakness

Development Approach

• Agile project management
• Rapid release management
• Programming standards
• Mobile application development

Apply Now\xe2\x80\x8b

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.

DBS Bank