Technology Audit Manager

About the Bank

GXS Bank is building a fast-growing regional digital banking group focused on reshaping financial services across Southeast Asia. Its purpose is to help people achieve bigger ambitions while advancing financial inclusion in the region. The bank’s approach is grounded in data, technology, and trust, and it aims to create meaningful impact by putting people first.

About the Team

The Internal Audit function operates independently as the bank’s third line of defence. It provides objective assurance and advisory support to senior leaders. The team takes a structured, disciplined, and risk-focused approach to assess risks, processes, and internal controls, while staying aligned with the bank’s digital direction. Its coverage spans a broad range of business and technology areas across the organisation.

Role Overview

Reporting to the Head of Technology Audit, you will play an important role in the Technology Audit team. In this position, you will conduct audits and provide risk advisory support across Technology and Engineering, including cloud infrastructure and applications, Technology Risk Management, Cybersecurity, and Data Governance.

This role is ideal for someone with practical experience using AI-based data analytics and automation to strengthen internal audit work in a fast-moving environment. You should also stay current on MAS requirements related to IT controls and cyber hygiene.

Key Responsibilities

• Carry out risk-based audit engagements and fieldwork, including documentation of work papers, preparation of audit observations, and participation in discussions with stakeholders on issues raised.
• Deliver audit assignments efficiently and on schedule, in line with the approved audit methodology and timelines.
• Keep audit documentation complete and properly supported within the GRC platform.
• Use data analytics proactively to improve the reach and impact of Internal Audit.
• Develop strong working relationships with management and stakeholders while serving as a reliable risk advisor.
• Contribute to special assignments, thematic reviews, and independent investigations when needed.

Requirements

• A bachelor’s degree in Computer Science, Information Systems, or another relevant discipline from a globally recognised university.
• At least 8 years of experience in Technology Audit or Cyber and Security Risk Management.
• Professional qualifications such as CISA, CISSP, AAIA, or Cloud Security certifications are strongly preferred.
• Solid knowledge of MAS Notices and Technology Risk Management (TRM) Guidelines.
• Practical exposure to AI-led analytics and programming will be a major advantage.
• Understanding of newer technology environments such as DevSecOps, cloud platforms, APIs, and service-oriented architectures.
• Ability to collaborate effectively with others while also working independently when required.
• Confidence to question and challenge risk decisions from a third-line-of-defence viewpoint.
• Strong communication, presentation, and report-writing abilities.
• Must be based in Singapore and willing to travel for work if needed.

Additional Information

This position is based in Singapore and is a full-time, onsite role. The vacancy count, salary, and start date were not specified in the source information.