Be part of CIBI Information Inc., a purpose-driven company at the forefront of enabling better credit decisions in the Philippines and beyond.
ROLE OVERVIEW:
Senior Manager, Internal Audit will be responsible for providing independent, objective and risk-based assurance to the Audit Committee and senior management regarding CIBI's key business processes, controls and governance arrangements in line with the IIA Global Internal Audit Standards (GIAS). This role involves conducting walkthroughs, performing control testing, transaction sampling, and data analysis to assess process effectiveness, identifying root causes, evaluating business impact, assessing risk severity, and providing practical recommendations to strengthen controls and improve those processes.
KEY RESPONSIBILITIES:
I. Audit Strategy & Planning
- Develop and maintain a riskbased annual Internal Audit plan for Audit Committee approval
- Build and maintain an audit universe covering CIBI's key processes, systems and risk areas
- Continuously reassess emerging risks and adjust audit priorities accordingly
II. Audit Execution
Plan, scope and execute internal audit engagements including but not limited to:
- Operational audits: Service delivery, collections, data processing, customer onboarding
- IT General Controls (ITGC): Access management, change management, system operations (distinct from ISMS/ISO scope)
- Procurement & vendor payments: Vendor selection, PO process, payment controls, contract compliance
- Fixed assets: Asset register accuracy, physical verification, disposal controls
- Financial month end close: Journal entries, reconciliations, cutoff procedures, reporting accuracy
- Revenue & billing integrity: Billing accuracy, collections, write off approvals
- Payroll & HR controls: Payroll master data, ghost employee checks, leave/benefits controls
- Regulatory compliance: Data Privacy Act, NPC circulars, CIC/SAE obligations (spot checks)
III. Reporting & Communication
- Prepare clear, concise, action-oriented audit reports with findings, risk ratings, root causes and agreed management action plans
- Present audit results and key themes to the Audit Committee and senior management
- Provide periodic IA dashboards (audits completed, findings status, overdue actions, emerging risks)
IV. FollowUp & Closure
- Track and validate management action plans to ensure timely and effective implementation
- Escalate overdue or inadequately addressed findings to the Audit Committee
- Monitor repeat findings and drive systemic improvements
V. Governance & Independence
- Maintain professional independence and objectivity per IIA GIAS
- Draft and maintain an Internal Audit Charter for Audit Committee approval
- Ensure all work is supported by structured, evidence-based working papers
VI. Coordination
- Coordinate with ISMS Auditor to avoid duplication and ensure complementary coverage across ISO/ISMS and operational audit domains
- Liaise with external auditors (statutory, ISO, SOC2) to leverage assurance and minimise gaps
- Coordinate with Shareholder Representative for oversight, quality review and Audit Committee support as required
REQUIREMENTS:
- Bachelor's degree in Accounting, Finance, Information Technology or related discipline.
- Minimum 8–10 years of progressive internal audit experience, with at least 3 years in a supervisory or managerial role.
- Professional certification: CIA (Certified Internal Auditor) or CPA (Certified Public Accountant)
- Demonstrated experience across operational, financial and IT audits (not limited to compliance or checklist-based reviews)
- Strong command of risk-based audit methodology and control frameworks (e.g. COSO, COBIT)
- Working knowledge of the IIA Global Internal Audit Standards
- Proven ability to prepare Audit Committee-ready reports and present to senior leadership or board-level stakeholders
- Hands-on executor; willing and able to personally conduct audits
Desirable:
- CISA (Certified Information Systems Auditor)
- Prior experience in financial services, credit bureaus, data-intensive or technology companies
- Familiarity with the Philippine regulatory landscape (Data Privacy Act / NPC, BSP, CIC/SAE framework)
- Exposure to ISO 27001 / SOC2 environments
- Background with Big 4 or reputable boutique IA firms
- Experience with data analytics or CAATs (computer-assisted audit techniques)
