AandA - IT Controls Assurance Manager

Monitor Deloitte; Manila; On-site; PHP 2,000,000 - 3,600,000; Full time

Job summary

Monitor Deloitte seeks a seasoned IT Audit professional to lead and manage assurance engagements, focusing on general IT controls and application controls while overseeing IT security, risk management and regulatory compliance. The role requires strong leadership and experience with risk assessments and audit reporting.

The ideal candidate has 8–10 years of IT audit/ assurance experience, familiarity with BSP-regulated entities, and proficiency in IT control frameworks.

Qualifications

• 8–10 years of IT audit and related assurance experience.
• Experience with BSP-regulated entities is an advantage.
• Strong understanding of IT control frameworks and standards (ISO 27001, NIST, PCI DSS, COBIT).
• Proven leadership and project management experience.

Responsibilities

• Lead and manage IT audits/assurance engagements including general IT controls and application controls.
• Oversee IT security, risk management, and regulatory compliance.
• Identify control weaknesses through risk assessments and gap analyses.
• Gather audit evidence, perform testing, and document findings.
• Plan scope, develop work programs and allocate resources.

Skills

IT Audit

Risk Management

Regulatory Compliance

Leadership

Team Coaching

Education

Bachelor's degree in IT / Accounting / Information Systems

Tools

ISO 27001

NIST

PCI DSS

COBIT

Job description

Job Description:

Are you ready to unleash your potential? At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve. We believe we have a responsibility to be a force for good, and World Impact is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed more equitable, inclusive as well as sustainable business practices. Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals. We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognised for their contributions.

Work you’ll do:

• Lead and manage IT audits/assurance engagements, including general IT controls (GITC) and application controls.
• Oversee IT security, risk management, and regulatory compliance (e.g., BSP, Data Privacy, ISO 27001, NIST, PCI DSS).
• Participate in risk assessments and gap analyses to identify control weaknesses.
• Gather and analyze audit evidence, perform testing, and document findings.
• Plan audit scope, develop work programs and allocate resources effectively.
• Prepare and review audit reports, executive summaries, and management presentations.
• Provide practical and risk-based recommendations to clients.
• Work collaboratively with team members and clients to complete audit engagements.
• Supervise, coach, and mentor associates and senior associates.
• Review deliverables to ensure accuracy, completeness, and quality.
• Support proposal preparation, business development initiatives, and client relationship management.
• Stay updated on IT security trends, regulations, and emerging risks.

Your role as a leader:

At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We connect our purpose and shared values to identify issues as well as to make an impact that matters to our clients, people and the communities. Additionally, Managers across our Firm are expected to:

• Develop diverse, high-performing people and teams through new and meaningful development opportunities.
• Collaborate effectively to build productive relationships and networks.
• Understand and lead the execution of key objectives and priorities for internal as well as external stakeholders.
• Align your team to key objectives as well as set clear priorities and direction.
• Make informed decisions that positively impact the sustainable financial performance and enhance the quality of outcomes.
• Influence stakeholders, teams, and individuals positively – leading by example and providing equal opportunities for our people to grow, develop and succeed.
• Lead with integrity and make a strong positive impact by energising others, valuing individual differences, recognising contributions, and inspiring self-belief.
• Deliver superior value and high-quality results to stakeholders while driving high performance from people across Deloitte.
• Apply their understanding of disruptive trends and competitor activity to recommend changes, in line with leading practices.

Requirements:

Education: Bachelor’s degree in Accountancy, Management Accounting, Information Technology, Information Systems, Computer Science or similar fields.

Work Experience:

• With 8-10 years of working experience with IT Audit, IT / Cyber Risk Management; related assurance services.
• Experience in handling FSI or BSP-regulated entities is advantage
• Strong understanding of IT Control Frameworks and standards (ISO 27001, NIST, PCI DSS, COBIT)
• Proven leadership and project management experience.

Certifications:

• Certified Public Accountant (CPA)
• Certified Internal Auditor (CIA)
• Certified Information Systems Auditor – CISA
• CISSP
• ISO 27001 Lead Auditor / Implementer