Job Title: Lead Internal Auditor – ISMS & BCMS

Experience: 7+ Years in Internal Auditing, Information Security, Business Continuity, Compliance, and Risk Management, with at least 3 years in a Lead Auditor or audit leadership capacity

Skills: ISO 27001, ISO 22301, Information Security Management Systems (ISMS), Business Continuity Management Systems (BCMS), Internal Auditing, Risk-Based Auditing, Governance, Compliance Management, Internal Controls Assessment, Root Cause Analysis, Corrective Action Management, Stakeholder Management, Audit Reporting, Team Leadership

Location: Alabang, Philippines

We at Coforge are hiring a Lead Internal Auditor – ISMS & BCMS with the following skillset:

Key Responsibilities

Lead and execute internal audits for Information Security Management Systems (ISO 27001) and Business Continuity Management Systems (ISO 22301).
Develop and maintain risk-based internal audit programs and annual audit schedules.
Evaluate compliance with ISO requirements, organizational policies, regulatory obligations, and client-specific controls.
Assess the effectiveness of information security controls, business continuity plans, governance frameworks, and risk management practices.
Review policies, procedures, records, evidence, and operational processes to validate compliance and control effectiveness.
Identify non-conformities, control gaps, compliance risks, observations, and opportunities for improvement.
Prepare, review, and approve audit findings, reports, and supporting documentation.
Conduct follow-up audits and validate the effectiveness of corrective and preventive actions (CAPA).
Provide timely audit status reports, escalation updates, and compliance dashboards to leadership.
Support external audits, surveillance audits, certification audits, and client reviews.
Ensure audit readiness across business functions and maintain compliance with established audit methodologies.
Partner with process owners and business stakeholders to strengthen governance, compliance, and risk controls.
Drive continuous improvement initiatives across audit, risk, compliance, information security, and business continuity programs.
Coach, mentor, and provide guidance to Senior Auditors and Auditors.
Maintain confidentiality, objectivity, and independence throughout the audit lifecycle.
Stay updated on ISO standards, industry regulations, audit methodologies, and emerging risks.
Perform other duties and responsibilities as assigned.

Qualifications

Bachelor's degree in Information Technology, Information Security, Risk Management, Engineering, Business Administration, or a related field.
At least 7 years of experience in Internal Audit, Compliance, Risk Management, Information Security, Governance, or Business Continuity.
Minimum of 3 years of experience leading audit programs, audit teams, or compliance engagements.
Strong experience conducting audits against ISO 27001 (ISMS) and ISO 22301 (BCMS).
Strong understanding of risk-based auditing principles, governance frameworks, compliance requirements, and internal controls.
Experience managing audit observations, remediation activities, and corrective action plans.
Excellent analytical, documentation, problem-solving, and reporting skills.
Strong communication, presentation, and stakeholder management capabilities.
Ability to influence stakeholders and drive compliance initiatives across multiple functions.
Knowledge of Information Security, Risk Management, and Business Continuity best practices.
Experience supporting certification audits and surveillance audits is highly preferred.

Mandatory Certifications

ISO 27001 Lead Auditor Certification
ISO 22301 Lead Auditor Certification

Preferred Certifications

CISA (Certified Information Systems Auditor)
CISSP (Certified Information Systems Security Professional)
CIA (Certified Internal Auditor)
CRMA (Certification in Risk Management Assurance)
ISO 31000 Risk Management Certification
ISO 9001 Lead Auditor Certification

Preferred Candidate Profile

We are looking for a highly analytical and detail-oriented audit professional with strong expertise in Information Security Management Systems (ISMS) and Business Continuity Management Systems (BCMS). The ideal candidate should be capable of leading end-to-end audit activities, identifying and mitigating organizational risks, strengthening governance and compliance practices, and building strong stakeholder relationships. The successful candidate must demonstrate leadership, sound judgment, and the ability to drive continuous improvement while ensuring audit readiness and compliance across the organization.