IT Auditor (Risk, Security & Compliance)

Company Overview

AGES is a Singapore-based company specializing in payment systems security audits and smart card technology. Established in 2004, we serve clients globally with expertise in IT security and compliance for payment systems.

AGES is qualified to perform security assessments by major international payment brands, including MasterCard, Visa, American Express, and UnionPay. Our company is also a PCI DSS Qualified Security Assessor (QSA), PCI 3DS, PCI CPSA, PCI T2PE, SWIFT qualified Assessor, conducting compliance audits that strengthen security awareness and adherence to global payment standards.

Job Summary

The IT Auditor will plan and execute IT and security audits for payment systems and related IT infrastructure, assess controls, identify risks, report findings and conduct vulnerable assessments such as penetration testings to enhance security and compliance with international standards.

Responsibilities

• Plan and perform IT and security audits across payment systems, card production environments, and IT infrastructures to ensure compliance with international standards and scheme-specific requirements
• Assess IT controls, including infrastructure, applications, databases, and network architectures, to evaluate control design and effectiveness within complex IT environments
• Review system configurations and access management to identify control gaps and risks
• Evaluate information security policies and procedures to ensure alignment with best practices and compliance requirements
• Prepare detailed audit reports documenting findings, evidence, and recommendations for remediation actions
• Follow up with stakeholders to verify implementation of corrective measures and continuous improvement
• Collaborate with internal teams and client representatives during pre-audit preparations and on-site assessments
• Contribute to the enhancement of audit methodologies and security best practices
• Communicate audit findings clearly to technical and non-technical stakeholders through written and verbal reports
• Maintain integrity and confidentiality when handling sensitive information
• Manage weekly travel requirements for audit engagements

Required competencies and certifications

• Professional certifications such as CISA, CISSP, CISM, or PCI QSA experience are required

Preferred competencies and qualifications

• Bachelor’s degree or diploma in Information Technology, Computer Science, or a related field
• Strong skills in IT Audit and IT Controls, with knowledge of IT Security concepts
• Advanced analytical skills to interpret technical data, identify patterns, and draw evidence-based conclusions
• Ability to work independently and collaboratively in a fast-paced audit environment
• Strong written and verbal communication skills to document and present audit findings effectively
• Fresh graduates with a strong interest in IT audit may apply
• Renumeration commensurate on experience

Other Information

• This is a full-time, on-site role based in Singapore
• Weekly travel is required for audit assignments
• A training bond will be signed with the selected candidate for certifications and industrial training
• AGES offers a friendly working environment with a motivated and hardworking team
• Find out more about us at www.ages-sg.com