Management Systems Auditor

**Who we’re looking for**

We’re seeking a fresh Diploma / Degree graduate in IT who has attention to detail, analytical skills, effective communication, technical aptitude, ethical conduct, problem-solving ability, adaptability, teamwork, time management, and a commitment to continuous learning. These qualities enable the Management Systems Auditor (IT) to effectively carry out audit activities, ensure compliance with ISO standards, and promote information security and IT service quality within organizations.

**Our client**

Our Singapore client is part of a global group headquartered in the UK. Incorporated in 1998, our client is the leader for the provisioning of management system certification and training services.

**What you’ll do**
- Plan audits on clients: This involves scheduling and organizing audits for clients' management systems. It includes determining the scope of the audit, identifying resources needed, and establishing a timeline for the audit process.
- Perform audits on clients: Conducting thorough examinations of clients' management systems to assess compliance with established standards and regulations such as ISO 27001 (Information Security Management) or ISO 20000 (IT Service Management). This involves collecting and analyzing data, interviewing personnel, and inspecting documents and processes.
- Risk Assessment: Identifying and evaluating potential risks to information security or IT service delivery and recommending measures to mitigate these risks in accordance with ISO standards.
- Follow up on actions to be taken by clients: After identifying areas for improvement during the audit, the auditor must communicate these findings to the client and ensure that corrective actions are understood and initiated. This may involve providing guidance and support to facilitate the implementation of necessary changes.
- Review clients’ corrective action: Assessing the effectiveness of the corrective actions taken by clients to address identified non-conformities or areas of improvement. This involves evaluating the adequacy of the solutions proposed by the client and verifying their implementation.
- Finalize audit reports: Compiling all audit findings, observations, and recommendations into a comprehensive report for the client. The report should clearly document the audit process, findings, conclusions, and any recommendations for improvement.
- Prepare monthly report: Generating regular reports summarizing audit activities, findings, and outcomes over a specific period. These reports may include metrics such as the number of audits conducted, findings identified, and status of corrective actions.
- Stakeholder Communication: Communicating audit results and recommendations to relevant stakeholders, including IT teams, management, and internal auditors.
- Conduct certification audits as support auditor: Participating in certification audits as a supporting member of the audit team. This involves assisting lead auditors in conducting assessments of clients' management systems against relevant standards or regulatory requirements.
- Ensure the computer information is kept updated: Maintaining accurate and up-to-date records of audit findings, reports, and other relevant information using computerized systems or databases. This ensures easy access to information for future reference and reporting purposes.
- On-the-job and external training shall be provided: Continuously improving professional knowledge and skills through both internal training programs and external courses or certifications. This ensures that auditors stay updated on industry best practices, standards, and regulatory requirements.

Overall, the role of a Management Systems Auditor is crucial in helping organizations maintain compliance, identify areas for improvement, and drive continuous improvement in their management systems.

**The knowledge, experience and qualifications you’ll need**
- Education: A diploma or bachelor's degree in information technology, computer science, information systems, or a related field is required.
- IT Skills: Strong technical skills and knowledge of IT systems, networks, and software are necessary for understanding and evaluating IT processes and controls. Proficiency in IT tools such as Microsoft Office or audit software.
- Analytical Skills: Management Systems Auditors need to analyze complex IT systems and processes, identify areas for improvement, and evaluate compliance with ISO standards. Strong analytical and problem-solving skills are essential.
- Communication Skills: Effective communication skills, both verbal and written, are crucial for conveying audit findings, collaborating with stakeholders, and preparing audit reports.
- Attention to Detail: Management Systems Auditors must pay close attention to detail when reviewing documentation, conducting audits, and identifying potential non-conformities or areas for improvement.
- Ethical Conduct: Integrity and professionalism