Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

Key Responsibilities:

Role Purpose: A practitioner who delivers rigorous, threat-informed audit execution, contributes to systemic analysis, and supports WoG capability building. This is the foundational role where problem-framing instincts, systems awareness, and AI fluency are developed — the entry point from which practitioners grow toward deeper specialisation in risk intelligence, policy feedback, or capability enablement.

PILLAR 1 — AUDIT EXECUTION (The "Engine")

Oversee 4 audits as audit manager within the fiscal year, ensuring:

Coverage of critical risk areas informed by threat intelligence and systems criticality
Problem framing at the scoping stage: structuring audit objectives as risk hypotheses rather than control checklists — asking "what could go wrong and why" before asking "is this control in place"
Clear, concise articulation of findings as risk narratives connecting control gaps to broader exposure and downstream impact
Recommendations that address root causes, not just surface deficiencies
Timely issuance of reports as per planned timelines

Apply data quality discipline during fieldwork — using standardised taxonomies and structured data capture to ensure findings feed Pillar 2's PRISM engine. Recognise that every audit engagement is simultaneously an intelligence-generation activity.
Develop and apply threat-informed thinking across audit engagements, building awareness beyond cyber controls to include:

Data risk: quality, lineage, and privacy dimensions
Resiliency risk: tested versus actual failover capability
Platform risk: third-party and supply chain dependencies
Practice risk: how processes actually operate under pressure versus how they are documented

Key Responsibilities:

PILLAR 1 — AUDIT EXECUTION (The "Engine")

Oversee 4 audits as audit manager within the fiscal year, ensuring:

Coverage of critical risk areas informed by threat intelligence and systems criticality
Problem framing at the scoping stage: structuring audit objectives as risk hypotheses rather than control checklists — asking "what could go wrong and why" before asking "is this control in place"
Clear, concise articulation of findings as risk narratives connecting control gaps to broader exposure and downstream impact
Recommendations that address root causes, not just surface deficiencies
Timely issuance of reports as per planned timelines

Apply data quality discipline during fieldwork — using standardised taxonomies and structured data capture to ensure findings feed Pillar 2's PRISM engine. Recognise that every audit engagement is simultaneously an intelligence-generation activity.
Develop and apply threat-informed thinking across audit engagements, building awareness beyond cyber controls to include:

Data risk: quality, lineage, and privacy dimensions
Resiliency risk: tested versus actual failover capability
Platform risk: third-party and supply chain dependencies
Practice risk: how processes actually operate under pressure versus how they are documented

Audit Manager

Assurity Trusted Solutions

Benefits

Audit Manager

Assurity Trusted Solutions

Benefits