Assistant Vice President-Internal Audit

Maxicare Healthcare Corporation; Makati; On-site; PHP 1,800,000 - 3,000,000; Full time

Job summary

Maxicare Healthcare Corporation in Makati is seeking an experienced IT Audit leader to develop risk-based audit plans for IT systems, applications, and infrastructure. You will assess IT risk, governance, cybersecurity, and compliance while guiding the audit team and presenting findings to senior management.

The role emphasizes leading enterprise IT audits, strengthening controls, and delivering actionable recommendations to improve risk management and security posture within a healthcare

Qualifications

• Strong knowledge of IT governance, cybersecurity, information security, data privacy, IT general controls (ITGC), and application controls.
• In-depth understanding of IT audit methodologies, risk assessment frameworks, regulatory compliance, and industry standards (COBIT, ISO 27001, NIST).
• Strong analytical, critical thinking, problem-solving, and decision-making skills.
• Excellent written and verbal communication, presentation, and stakeholder management abilities.
• Proven leadership, coaching, and team development capabilities.

Responsibilities

• Develop and implement risk-based IT audit plans covering systems, applications, infrastructure, and processes.
• Conduct IT risk assessments to identify vulnerabilities, control gaps, and operational inefficiencies.
• Evaluate compliance with internal policies, regulatory requirements, and industry standards.
• Lead the execution of IT audits, control reviews, and special audit engagements.
• Assess the effectiveness of IT governance, cybersecurity, data security, and IT general controls.
• Prepare and present comprehensive audit reports, including findings, recommendations, and management action plans, to senior management and the Audit Committee.
• Collaborate with Internal Audit and cross-functional teams to execute integrated audits and strengthen enterprise risk management.
• Monitor emerging technology risks, cybersecurity trends, and regulatory developments to enhance audit methodologies.
• Provide strategic leadership by supervising, coaching, mentoring, and developing the IT Audit team.
• Promote fraud prevention, risk awareness, and continuous improvement of IT controls, governance, and security frameworks.

Skills

IT Governance

Cybersecurity

ITGC

Application Controls

COBIT

ISO 27001

NIST

Leadership

Risk Assessment

Stakeholder Management

Job description

Key Responsibilities

• Develop and implement risk-based IT audit plans covering systems, applications, infrastructure, and processes.
• Conduct IT risk assessments to identify vulnerabilities, control gaps, and operational inefficiencies.
• Evaluate compliance with internal policies, regulatory requirements, and industry standards.
• Lead the execution of IT audits, control reviews, and special audit engagements.
• Assess the effectiveness of IT governance, cybersecurity, data security, and IT general controls.
• Prepare and present comprehensive audit reports, including audit findings, recommendations, and management action plans, to senior management and the Audit Committee.
• Collaborate with Internal Audit and cross-functional teams to execute integrated audits and strengthen enterprise risk management.
• Monitor emerging technology risks, cybersecurity trends, and regulatory developments to continuously enhance audit methodologies and practices.
• Provide strategic leadership by supervising, coaching, mentoring, and developing the IT Audit team.
• Promote fraud prevention, risk awareness, and the continuous improvement of IT controls, governance, and security frameworks.

Experience

• Minimum of 10 years of progressive experience in IT auditing, IT risk management, and compliance, including people leadership and team management.
• Preferably with experience in the healthcare, HMO, insurance, financial services, or medical provider industry.
• Demonstrated experience leading enterprise-wide IT audits, cybersecurity assessments, and technology risk initiatives.

Certifications

• Professional certification such as Certified Information Systems Auditor (CISA) is highly preferred.
• Additional certifications such as Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), Certified Internal Auditor (CIA), or other globally recognized IT audit, cybersecurity, or risk management certifications are an advantage.

Skills

• Strong knowledge of IT governance, cybersecurity, information security, data privacy, IT general controls (ITGC), and application controls.
• In-depth understanding of IT audit methodologies, risk assessment frameworks, regulatory compliance, and industry standards (e.g., COBIT, ISO 27001, NIST).
• Strong analytical, critical thinking, problem-solving, and decision-making skills.
• Excellent written and verbal communication, presentation, and stakeholder management abilities.
• Proven leadership, coaching, and team development capabilities.
• Ability to influence senior stakeholders and provide strategic recommendations to strengthen IT governance and risk management.
• High level of integrity, professional judgment, and attention to detail.