Vice President, Specialist, Technology Auditor; Enterprise Process), Group Audit

Group Audit helps the Board and Executive Management meet the strategic and operational objectives of the DBS Group. We provide independent assurance on whether the Group’s governance, risk management and control processes are adequately designed and operating effectively.

Our Technology Audit team comprises experienced professionals who act as trusted advisors on technology risk and controls. The team provides independent challenge and assurance across technology resilience, architecture, infrastructure, IT service management, change and configuration management, asset management, and technology risk governance.

We are seeking an experienced and independent technology risk professional at VP level who can evaluate complex technology environments, challenge architecture and control decisions, and assess technology risks from both a resilient architecture and risk governance perspective
.

• Lead and execute end-to-end technology audits covering resilient architecture, technology infrastructure, IT service management and technology risk governance.
• Independently assess whether technology architectures are designed and operated to support availability, recoverability, fault tolerance and continuity of critical business services.
• Evaluate resilient architecture patterns, including active-active and active-passive designs, availability zones, dependency management, automated failover, recovery mechanisms, capacity management and elimination of single points of failure.
• Assess the adequacy of architecture governance, including architecture standards, design reviews, technology risk assessments, exception management and approval of residual risks.
• Review technology risk management practices commonly overseen by Line 2, including risk identification, control assessment, risk acceptance, key risk indicators, thematic reviews, issue management and independent challenge of technology risk decisions.
• Lead audits and thematic reviews relating to production change governance, deployment practices, change risk assessment, configuration management, technology asset management, end-of-support and end-of-life risk, IT incident management and operational resilience.
• Perform incident back-testing to assess the background, impact, root cause, behavioural or process root cause, control breakdowns, recovery effectiveness and adequacy of management’s corrective actions.
• Evaluate whether technology risks and control weaknesses are identified, escalated and reported to senior management and governance committees in a timely and transparent manner.
• Assess the design and operating effectiveness of controls across complex technology environments, including on-premises infrastructure, cloud platforms, container platforms, middleware, databases, networks and third-party technology services.
• Develop risk-based audit strategies, scopes and procedures that provide effective coverage of emerging and systemic technology risks.
• Identify cross-cutting and thematic issues, distinguish symptoms from underlying root causes, and assess whether weaknesses are isolated or indicative of broader control deficiencies.
• Communicate complex technology and architecture risks clearly to senior stakeholders, with concise articulation of the business impact, risk exposure and required management actions.
• Produce high-quality audit reports with sound risk assessments, clear logic flow, balanced conclusions and practical recommendations that address the underlying root causes.
• Apply data analytics, automation and continuous monitoring techniques to improve audit coverage, identify control exceptions and support ongoing risk assessment.
• Monitor significant technology risks, regulatory developments, incidents, audit issues…