IT Auditor (Risk, Security & Compliance)

Company Overview

Founded in the Year 2004, AGES possesses extensive experience collaborating with prominent payment brands such as MasterCard International, Visa International, American Express Company, and UnionPay International on compliance assessments. Our team possesses the expertise and experience to guide our clientele through the necessary compliance assessments to align with regulatory requirements.

We offer comprehensive audit services, including Payment Card Industry (PCI) Card Production and Provisioning (CP), PCI Data Security Scheme (DSS), PCI 3D Secure (3DS), PCI P2PE / Token Service Provider(TSP), SWIFT Customer Security Program (CSP), ISO security programs, and other relevant standards.

Role

As our IT Auditor, you will support attestation-based audits and cybersecurity controls across our portfolio of clients globally.

This is an excellent platform for you to enter the payment security industry where global security framework is required in any organization for storing, processing, or transmitting credit card data to maintain a secure environment, and for card vendors to maintain strict compliance in their physical and logical security measures.

You will gain strong career versatility and professional qualifications with highly respected credentials attained through our Company that set a solid foundation which continues to pave the way for your future.

Responsibilities

• Plan and perform internal and external pre-audit assessments and attestation-based / certification audits across payment systems, card production environments, and IT infrastructures to ensure compliance.
• Review and identify control gaps and risks.
• Prepare detailed audit reports documenting findings, evidence, and recommendations for remediation actions.
• Follow up with stakeholders to verify implementation of corrective measures and continuous improvement.
• Contribute to the enhancement of audit methodologies and security best practices.

Required Certifications

• CISA, CISSP, CISM, ISO 27001 lead implementor or PCI QSA certifications is a must.
• Bachelor’s degree or diploma in a relevant field.
• Possess advanced analytical skills to interpret technical data, identify patterns, and draw evidence-based conclusions.
• Strong written and verbal communication skills to document and present audit findings effectively.

Commitment

• Weekly overseas travelling is required for audit assignments over a span of 8 months yearly.
• You are required to sign a training bond for the certifications and industrial training as the company will train you to be a certified auditor such as the PCI CPSA and QSA.
• Find out more about us at www.ages-sg.com.