IT Audit Manager

Description

Directly reporting to Senior IT Audit Manager/ AVP IT Internal Audit, IT Audit Manager executes and leads IT audits and manages multiple projects simultaneously.

Location: SM Corporate Offices, Pasay City

Responsibilities

• Examine and assess whether information processing facilities are designed for data integrity, disallowing any room for loss of data, data tampering or data theft.
• Assess and validate accuracy and conformance of information processing facilities and data to the organization's policies and standards.
• Confirm that all transactions and activities on information systems conform to set standards.
• Execute and document audit work and conclude on the results of audit tests and overall effectiveness of controls.
• Monitor/supervise work of IT auditors and ensure all audits are in accordance with the best practices and standards.
• Evaluate audit findings and recommendations of IT auditors.
• Advice process owners how to develop appropriate corrective action plans for any control deficiencies.
• Assess and evaluate system flaws while promoting efficient practices by way of improvement recommendation in information process capability, user interface and security designs.
• Direct audit functions while understanding the risks associated with current and emerging technologies and trends.
• Perform technical assessments (i.e., network, vulnerability, and penetration tests) and other IT related reviews for information processing facilities.
• Provide sound technical advice/advisory during the design, development and/or implementation of new information systems and major enhancements to existing systems.
• Oversee execution of IT audit projects to ensure completion in a timely and efficient manner.

Skills and Qualifications

• Bachelor's Degree in Computer Science/IT or Accounting
• Certification in any of the following is strongly preferred: CISA, CIA, CISM, CPA
• Participation in professional organizations (IIA, ISACA, etc.)
• At least 5 years as IT Auditor or comparable experience
• Strong knowledge with industry standards and best practices (e.g., ISO/IEC, PCI-DSS, NIST, COBIT etc.)
• Capability to use data analysis and continuous controls monitoring tools such as ACL
• Proficient in Microsoft Office, particularly Excel, Word, Visio and PowerPoint.
• Knowledge with IT auditing theories and principles, audit procedures and techniques, and internal controls, including IT controls
• Hands-on experience and in-depth knowledge of all kinds of computer systems, including mainframes and PCs, along with the operating systems and major applications that run on these computers.
• Knowledge with the requirements and implementation of PCI DSS including relevant internal IT and business controls