IT Audit Manager - Internal Audit

Job Summary

Join SM Retail as an IT Audit Manager and play a key role in strengthening the organization's technology governance, risk management, and internal control environment. You will lead IT audit engagements, assess technology and cybersecurity risks, and partner with business and technology teams to enhance the security, reliability, and effectiveness of critical systems. This role offers the opportunity to work on emerging technologies, digital transformation initiatives, and enterprise-wide risk management projects.

What You'll Do

• Lead and execute IT audit engagements across applications, infrastructure, cybersecurity, ERP systems, and technology-enabled business processes.
• Evaluate the design and effectiveness of IT General Controls (ITGC), application controls, cybersecurity controls, and IT governance processes.
• Identify technology risks, control gaps, and process improvement opportunities, and provide practical recommendations to strengthen internal controls.
• Assess compliance with internal policies, regulatory requirements, and recognized frameworks such as COBIT, NIST, ISO 27001, PCI DSS, and related standards.
• Review emerging technologies, cloud environments, digital initiatives, and system implementations to identify potential technology risks.
• Perform or oversee technical reviews including vulnerability assessments, access management reviews, network security assessments, and other IT-related audits.
• Provide advisory support during system implementations and major technology initiatives to ensure appropriate controls are embedded.
• Prepare and present audit reports, communicate findings to senior management, and monitor the timely completion of agreed action plans.
• Coach and mentor IT auditors while ensuring audit engagements are completed in accordance with professional standards and established timelines.

What We're Looking For

• Bachelor's degree in Computer Science, Information Technology, Information Systems, Accountancy, or a related discipline.
• At least 5 years of experience in IT Audit, Information Security, Technology Risk, Internal Audit, or related fields, with leadership or project management experience.
• Professional certifications such as CISA, CISM, CIA, CPA, CRISC, or CISSP are highly preferred.
• Strong understanding of IT governance, IT General Controls (ITGC), cybersecurity, information security, and risk management frameworks.
• Experience auditing ERP systems, cloud environments, databases, networks, and enterprise applications is an advantage.
• Experience in cybersecurity, cybersecurity auditing, or assessing cybersecurity risks and controls is highly preferred.
• Familiarity with data analytics and audit tools (e.g., ACL, IDEA, Power BI, SQL, or similar) is an advantage.
• Excellent analytical, stakeholder management, communication, and report-writing skills.
• Ability to manage multiple audit engagements and collaborate effectively with cross-functional teams.