SUMMARY OF THE ROLE
In the role, you’ll required to assess IT application systems including business application systems (e.g. SAP) and healthcare clinical systems supporting the hospital operations
- Application controls (input controls, output controls, application configurations; processing logic and interface controls).
- Assess adequacy of accuracy, completeness and availability of data
- Review access controls including SAP Authorisation.
- Using Data Analytics to identify improvements in application design / system transaction flows, or improvement in business processes.
- Review operating systems and database security as well as IT operational controls (e.g. change controls, computer operations, monitoring controls, etc.).
- Participate in System Development Life Cycle (SDLC) review to provide advice on security and control features during the development stage including pre-implementation and post-implementation controls.
- To review the system availability in relation to IT infrastructure setup, disaster recovery plan and readiness in testing.
JOB RESPONSIBILITIES
- To present and communicate with the Audit Committee and Senior Management of the MOHH group of entities on the IT audit findings.
- To present and articulate the IT, Operations and cyber security observations to senior management.
- Ensures staff compliance with Audit Procedures when reviewing/approving audit plans, working papers, audit reports and other ad hoc assignments submitted by staff.
- Managing resources and projects to meet the internal audit plan established and delivery of quality outputs.
- Drive IT audits, advisory and investigation work on the stakeholders.
- Prepare and present insightful findings to Management and Audit Committee, and perform any other duties as assigned.
- Deliver high quality and efficient audit and advisory services.
- Coach and develop people by sharing knowledge with team members and helping team members attain experiences that cultivate technical competencies.
- Manage IT auditors’ performance, oversee IT training and development and ensure appropriate resources of IT capabilities.
- Establishing and maintaining key business relationships with internal firm leadership and the firm's external auditors resulting in maximum effectiveness.
- Plan, perform and lead audits of complex system and/or operations or perform components of such audits.
JOB REQUIREMENTS
Education Requirement(s):
- Degree in Computing or Accountancy
- CIA/CISA/CRISC/CISM/CISSP/PMP/Agile certifications are added advantage.
Key Qualities:
- Practical knowledge of Microsoft technologies, open source (e.g. Linux), SAP HANA, OBIEE, SQL, RPA (e.g. UI Path), Oracle, cloud hosting, behavioural analytics, datacentre operations or SaaS (Software As A Service) will be beneficial.
- Good understanding of the audit methodology and the security defence measures put in place.
- Strong understanding and risk and controls, ability to articulate issues, and provide board & management reporting.
- Strong understanding of complex business and IT processes, and their related risks.
- Staff and audit project management experience is preferred.
- Proven experience in delivering internal audit and advisory engagements.
- Able to evaluate IT internal controls and identify opportunities for controls improvement.
- Able to identify other areas of business initiatives and changes in the business environment and assess their impact on the business control environment.
- Resourceful and possess good interpersonal and communication skills as well as good leadership qualities.
- Able to work independently and as an effective team player.
Years of Experience Required:
- At least 7 years of IT external or internal audit working experience to audit the application systems with big 4 Accounting firms or large conglomerates.
- Years of IT security implementation experience either from in-house capability; a Service Integrator (SI) environment or from a consulting firm are also welcome.