IT Audit Officer (Cybersecurity)

TL;DR

IT Audit Officer (Cybersecurity): Conducting risk-based technology and cybersecurity audits across business units with an accent on IT general controls, application controls, cloud platforms, and sensitive data protection. Focus on testing control effectiveness, identifying emerging cyber risks, developing practical remediation recommendations, and communicating findings to senior management.

Location: Philippines

What you will do

• Design and execute risk-based technology and cybersecurity audits in line with internal audit methodology and professional standards.
• Assess IT general controls, application controls, cybersecurity controls, and technology governance processes.
• Perform walkthroughs, control testing, system reviews, data analysis, evidence evaluation, and follow-up reviews.
• Evaluate compliance with laws, regulations, industry standards, and internal policies.
• Identify control deficiencies, root causes, emerging technology risks, and gaps in management preparedness.
• Prepare audit reports, validate findings with management, communicate outcomes to senior stakeholders, and support Audit Committee reporting.

Requirements

• Bachelor’s degree in Accounting, Information Technology, Finance, or a related field.
• At least 3 years of relevant external audit experience or internal audit experience in banking or financial services.
• Strong analytical, problem-solving, and attention-to-detail skills.
• Excellent written and verbal communication skills.
• Ability to work independently and collaboratively.
• Proficiency in Microsoft Office applications.

Nice to have

• CPA, CISA, CRISC, or an equivalent professional license or certification.

Culture & Benefits

• Opportunity to contribute to the development of audit programs, methodologies, and technology audit capabilities.
• Exposure to technology, cybersecurity, banking, and financial services risk topics.
• Involvement in ad hoc reviews, investigations, and special assignments.
• Professional environment requiring independence, objectivity, and constructive stakeholder relationships.