Supports the execution of the annual IT audit plan by performing risk-based audits of IT systems, applications, infrastructure, and cybersecurity controls. Ensures the reliability, security, and integrity of information systems through evaluation of internal controls, regulatory compliance, and alignment with industry frameworks such as COBIT and ISACA standards. Contributes to continuous improvement of IT audit methodologies and quality assurance processes.
Key Responsibilities:
- Contributes to the annual IT audit plan through identification of high-risk areas and emerging technology risks
- Develops detailed audit work programs outlining objectives, scope, timelines, and testing procedures
- Conducts preliminary meetings and opening conferences with auditees
- Performs business process walkthroughs, interviews, and risk assessments to identify key controls
- Conducts IT audit engagements covering applications, infrastructure, cybersecurity, and IT general controls (ITGC)
- Reviews supporting documentation, performs control testing, and evaluates compliance with policies and regulatory requirements
- Analyzes data to identify trends, root causes, and control gaps
- Identifies audit issues and recommends practical corrective actions
- Maintains organized and complete working papers in accordance with audit documentation standards
- Drafts audit findings, observation sheets, and audit briefs
- Prepares presentation materials for reporting audit results to Management and Audit Committee
- Participates in closing meetings to discuss findings, management responses, and agreed action plans
- Monitors management action plans and verifies implementation of corrective actions
- Prepares periodic progress reports to the Audit Committee
- Participates in special reviews, advisory engagements, and process improvement initiatives
- Provides recommendations on IT governance, cybersecurity, and system controls aligned with COBIT and ITIL frameworks
Qualifications:
- Bachelor's degree in Accounting, Information Systems, Computer Science, Information Technology, or related field
- At least five (5) years of experience in internal audit, IT audit, or information systems audit
- Experience in SAP audit and IT general controls review
- Preferably Certified Information Systems Auditor (CISA); CPA is an advantage
- Strong knowledge of risk-based auditing, control frameworks, and IT governance principles
- Willing to work in Makati
