Digital Risk Staff

Jobtailor; Philippines; On-site; PHP 800,000 - 1,100,000; Full time

Job summary

Jobtailor is seeking an IT risk & compliance professional in the Philippines to lead IT audit activities, design risk controls such as IT SOX, and perform internal control testing. You will conduct IT control reviews, analyze SOC1/SOC2 reports, and identify gaps for client-facing engagements.

Strong communication and certifications like CISA/CISM are preferred. The role emphasizes delivering high-quality assessments and implementing controls across technology platforms and emerging technologies,

Qualifications

• Bachelor's or master's degree in a relevant field.
• Approximately 2-3 years of related work experience.
• At least 1-2 years in IT Risk and Compliance.
• Design IT Risk Controls frameworks such as IT SOX.
• Experience with internal controls implementation and testing.
• Knowledge of COSO, COBIT, ISO, NIST or similar IT security frameworks.
• Experience with SAP, Oracle, Workday, MS Dynamics or cloud/RPA/AI/ML.
• Strong client-facing communication, documentation and reporting skills.
• Relevant certifications such as CISA, CISM, CISSP, CRISC, CCSK, ISO 27001.

Responsibilities

• Leverage proven IT Audit experience to assess and design controls.
• Deliver quality results in assessment, design, and support implementation of controls.
• Conduct IT internal control reviews and SOC1/SOC2 reviews.
• Identify control gaps, weaknesses and areas for improvement.
• Maintain clear documentation and client communications.

Skills

IT Audit Experience

IT Risk And Compliance

IT SOX Framework Design

Education

Bachelor's degree

Master's degree

Tools

SAP

Oracle

Workday

MS Dynamics

Cloud Technologies

RPA

AI/ML

Job description

• leverage proven track record of IT Audit experience
• deliver quality results in the assessment, design, and support implementation of controls
• conducting IT internal control reviews and review of SOC1 or SOC2 reports
• identify control gaps, weaknesses and areas of improvements

Requirements

• bachelor's or master’s degree
• approximately 2-3 years of related work experience
• at least 1-2 years of experience in IT Risk and Compliance
• design IT Risk Controls framework such as IT SOX
• implementation and testing of internal controls
• knowledge of IT risk, information security or cyber security frameworks such as COSO, COBIT, ISO, NIST etc.
• experience with technologies such as SAP, Oracle, Workday, MS Dynamics or emerging technologies such as Cloud, RPA, AI/ML
• strong exposure working in client facing roles
• excellent communication, documentation and report writing skills
• relevant industry certifications such as CISA, CISM, CISSP, CRISC, CCSK, ISO 27001

Core Competencies

Demonstrates expertise in IT Audit, Risk, and Compliance, with a strong focus on designing and implementing IT Risk Controls frameworks. Proficient in conducting internal control reviews and assessing information security frameworks while delivering quality results in client-facing roles.

Highest-signal resume keywords

• IT Audit Experience
• IT Risk And Compliance
• IT SOX Framework Design
• CISA Certification
• Knowledge Of Cyber Security Frameworks

ATS Optimization Keywords

Hard Skills

• Internal Control Implementation
• Control Gap Identification
• SOC1 And SOC2 Review
• IT Risk Assessment
• Control Testing

Soft Skills

• Excellent Communication
• Documentation Skills
• Report Writing Skills

Certifications & Qualifications

• CISA
• CISM
• CISSP
• CRISC
• CCSK
• ISO 27001

Industry Keywords

• COSO
• COBIT
• ISO
• NIST
• IT Internal Control Reviews

Tools & Technologies

• SAP
• Oracle
• Workday
• MS Dynamics
• Cloud Technologies
• RPA
• AI/ML