Head of Internal Audit, Strategy & Planning

The Cyber Security Agency of Singapore (CSA) is seeking an experienced internal audit professional to establish and lead its Internal Audit function. As Head of Internal Audit, you will provide independent and objective assurance and advice to support good governance, effective risk management and internal controls, and the achievement of CSA's strategic objectives. You will lead a team responsible primarily for operational, financial and compliance audits, while working with GovTech and other specialist assurance providers on technology and cybersecurity audits. The role provides an opportunity for an experienced audit professional to take on the leadership of an agency Internal Audit function, engage senior management and the Audit Committee, and contribute to the continued development and transformation of internal audit practices across the Ministry family. 1) Establish and Lead the Internal Audit Function • Establish and lead CSA’s Internal Audit function in accordance with the Global Internal Audit Standards (GIAS) and relevant public sector requirements. • Develop and implement Internal Audit's strategy, operating model, and risk-based Annual Audit Plan, taking into account CSA's strategic objectives, key and emerging risks and stakeholder expectations. • Provide independent and objective insights to senior management and the Audit Committee on significant governance, risk management and internal control matters. • Maintain the independence and objectivity of Internal Audit and appropriate access to senior management and the Audit Committee. 2) Strengthen Governance, Risk Management and Internal Controls • Lead and oversee operational, financial and compliance audits, periodic reviews and advisory engagements across CSA. • Assess the adequacy and effectiveness of governance, risk management and internal controls, and develop practical recommendations that address the underlying risks and root causes identified. • Review the effectiveness of whistleblowing arrangements and lead or support investigations into significant incidents, allegations or control concerns, where requested by senior management or the Audit Committee. 3) Coordinate Technology and Cybersecurity Assurance • Maintain a good appreciation of technology, cybersecurity, data and other emerging digital risks relevant to CSA's operating environment. • Work closely with GovTech and other specialist assurance providers on technology and cybersecurity audits, including providing relevant business and risk context and understanding the implications of audit results for CSA. • Consider technology and cybersecurity assurance results as part of Internal Audit's overall assessment of CSA's governance, risk and control environment, and identify potential assurance gaps where appropriate. 4) Drive Transformation and Champion Innovation • Collaborate closely with the Ministry Group Chief Internal Auditor (GCIA) to strengthen internal audit processes and support conformance with the Global Internal Audit Standards (GIAS). • Champion the adoption of digital tools, data analytics, and continuous auditing methodologies within CSA Internal Audit to enhance audit effectiveness and efficiency. • Establish and lead CSA Internal Audit transformation initiatives in alignment with GCIA frameworks and Ministry-wide initiatives. 5) Team Leadership and Development • Build, lead, and develop a high-performing IA team with strong business audit, analytical, stakeholder management and data analytics capabilities. • Mentor and coach IA officers in modern audit methodologies and facilitate professional development opportunities. • Foster a culture of continuous learning and adaptation to emerging audit practices in alignment with GCIA transformation goals. Key Qualifications: • At least 10 years of internal or external auditing experience, with experience in a leadership capacity. • Professional certifications such as Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or equivalent. • Strong knowledge of Global Internal Audit Standards (GIAS) and internal control frameworks. • Experience using data analytics and digital tools in audit work. • Good appreciation of technology and cybersecurity risks and controls, with the ability to engage effectively with specialist IT auditors and technology stakeholders. • Past working experience in a government agency or technology organization would be useful. • Proven track record of managing audits, leading teams, developing audit strategies and applying risk-based audit approaches. • Experience collaborating with central audit functions and implementing standardized audit practices. Desirable Qualifications: • Experience in transforming and modernising audit practices. • Experience transforming or significantly enhancing an internal audit function or audit capability would be an advantage. • Knowledge of audit automation tools and data visualisation tools. Key Competencies: • Ability to operate independently, exercise sound judgement and build trusted relationships with senior stakeholders. • Strong analytical, conceptual and problem-solving skills. • Sound professional judgement, integrity and the ability to provide constructive challenge. • Excellent communication and interpersonal skills. • Strong leadership, coaching and team development capabilities. • Strong stakeholder management and influencing skills. • Ability to drive change and continuous improvement in a dynamic environment. • Collaborative approach to working with central functions.