IT Auditor (Global - Governance, Risk & Compliance)

Roles & Responsibilities

Company Overview

Founded in the Year 2004, AGES possesses extensive experience collaborating with prominent payment brands such as MasterCard International, Visa International, American Express Company, and UnionPay International on compliance assessments. Our team possesses the expertise and experience to guide our clientele through the necessary compliance assessments to align with regulatory requirements.

We offer comprehensive audit services, including Payment Card Industry (PCI) Card Production and Provisioning (CP), PCI Data Security Scheme (DSS), PCI 3D Secure (3DS), PCI P2PE / Token Service Provider(TSP), SWIFT Customer Security Program (CSP), ISO security programs, and other relevant standards.

Role

As our senior IT Auditor, you will plan, execute attestation-based audits against the Payment Cards Industry Security Standards Council (PCI SSC) framework across our portfolio of clients globally. This is a specialized framework and certification overseen by the PCI Council to validate the physical and logical creation of payment cards.

Responsibilities

• Conduct Logical Security: Auditing data preparation, PIN generation, cryptographic keys, and chip personalization/provisioning.
• Conduct Physical Security: Auditing plastic card manufacturing, chip embedding, secure storage, fulfilment, and transport mailing
• Support CSA Cyber Essentials Mark, and Cyber Trust Mark readiness and implementation engagements.
• Prepare detailed audit reports documenting findings, evidence, and recommendations for remediation actions.
• Follow up with stakeholders to verify implementation of corrective measures and completion of remediation.
• Develop governance frameworks, cybersecurity policies, security policies and security training programs.

Required Competency

• A good Bachelor’s degree or recognised Diploma in a relevant field.
• Possess the Certified Information Systems Auditor (CISA) certification or currently pursuing the examination.
• Possess a minimum 3 to 5 years of working experience in any information technology related field.
• Possess advanced analytical skills to interpret technical data, identify patterns, and draw evidence-based conclusions.
• Strong written and verbal communication skills to document and present audit findings effectively.
• Able to travel abroad frequently to conduct audits.

Commitment

• Weekly to Bi-weekly overseas traveling is required.
• A training bond will be signed for the external industry-related courses, certifications and overseas training provided for you.
• Find out more about us at www.ages-sg.com.

Tell employers what skills you have

Information Security Policies
Remediation
governance framework
Auditing/ Assurance
IT Infrastructure
PCI DSS
IT GRC
Compliance Issues
CISA
It Auditing