Division Manager - Compliance and IT Governance

Innodata Group; Central Visayas; On-site; PHP 1,800,000 - 2,800,000; Full time

Job summary

Innodata Group seeks a Division Manager to lead compliance and IT governance for Finance systems in Subangdaku, Mandaue, Cebu, Philippines. You will oversee ITGC/ITAC programs, audit coordination, and evidence readiness with cross-functional teams including FIS, Global Technology, Information Security, and external auditors.

The role requires 7+ years in IT controls or governance, strong leadership, and preferred certifications (CISA/CIA/CPA).

Qualifications

• 7+ years of IT controls, IT audit, technology risk, systems compliance, or IT governance experience.
• Experience leading or supervising staff, including performance management.
• Preferred certifications: CISA, CIA, CPA, or equivalent.

Responsibilities

• Lead the Finance IT general controls (ITGC) program, including user and privileged-access reviews and control certifications.
• Coordinate review of IT application controls (ITAC), such as approval workflows and audit trails.
• Manage Finance FIS responses to internal and external IT-control audits; coordinate remediation with control owners.
• Maintain governance policies, control schedules, evidence repositories, and risk/exception records for Finance systems.
• Obtain and assess vendor SOC reports and bridge letters; identify user entity controls and coordinate with teams.
• Provide control guidance for proposed Finance system and process changes while owners retain delivery responsibility.
• Identify and implement improvements to compliance and control processes for clearer ownership and better evidence collection.
• Set team priorities, review quality of work, coach staff, and ensure backup coverage for critical activities.

Skills

People leadership

Stakeholder management

Analytical thinking

Communication

Planning and ownership

Continuous improvement

Education

Bachelor's degree in Accounting/Finance/IS/IT/Business Administration

Tools

Spreadsheets

Reporting tools

SOX controls

ERP systems

Finance SaaS platforms

Job description

Division Manager - Compliance and IT Governance Subangdaku, Mandaue, Cebu, Region Vii, Philippines 4 - 7 Years Probationary

Job Description

Compliance and IT GovernanceManager

Level 6 | Finance – Financial Information Systems | Reports to Vice PresidentFinance

Aboutthe role

We are seeking a manager to lead compliance and ITgovernance for Finance systems. This person will manage the Compliance and ITGovernance team and oversee recurring IT controls, access governance, auditcoordination, policies, vendor assurance, and remediation. The role worksclosely with Finance process owners, Financial Information Systems (FIS),Global Technology, Information Security, and auditors to keep controlseffective and evidence ready for review.

Responsibilities

• Lead the Finance IT general controls (ITGC) program,including user and privileged-access reviews, segregation-of-duties checks,audit-log reviews, and control certifications.
• Coordinate review of IT application controls (ITAC),such as approval workflows, automated validations, system restrictions, and audit trails.
• Manage Finance FIS responses tointernal and external IT-control audits; review supporting evidence, trackfindings, and coordinate remediation with control owners.
• Maintain governance policies,procedures, control schedules, evidence repositories, and risk or exceptionrecords for Finance systems.
• Obtain and assess relevant vendor SOCreports and bridge letters; identify complementary user entity controls andfollow through with responsible teams.
• Provide control guidance for proposedFinance system and process changes while project and process owners retaindelivery responsibility.
• Identify and implement approvedimprovements to compliance and control processes, including simpler reviewsteps, clearer ownership, better evidence collection, and appropriateautomation.
• Set priorities for the team, reviewthe quality of its work, coach staff, and maintain backup coverage for criticalactivities.

Qualifications

• Bachelor’s degree inAccounting, Finance, Information Systems, Information Technology, BusinessAdministration, or a related field.
• At least seven years of relevantexperience in IT controls, IT audit, technology risk, systems compliance, or ITgovernance, including hands-on ITGC work.
• At least two years of experienceleading or supervising staff, including work review, coaching, and performancemanagement.
• Experience supporting internal orexternal audits of financial systems and coordinating remediation with controlowners.
• Preferred: CISA, CIA, CPA, or an equivalent professionalcertification; experience with SOX controls, ERP systems, or Finance SaaSplatforms.

Technicalskills

• ITGC and ITAC design, operation, andtesting; user access and privileged-access reviews; segregation of duties;change management; and audit-log monitoring.
• Control documentation, risk and issueassessment, evidence management, audit responses, and remediation tracking.
• Review of SOC 1 or SOC 2 reports,bridge letters, and complementary user entity controls.
• Working knowledge of financialsystems and the ability to analyze access listings, logs, control reports, andexception data using spreadsheets or reporting tools.

Skillsand competencies

• People leadership: assigns andreviews work, coaches team members, develops backup coverage, and holds theteam accountable for deadlines.
• Stakeholder management: workseffectively with Finance, technology, process owners, vendors, and auditors andcan follow up on actions across teams.
• Analytical thinking and judgment: identifies control gaps, evaluates practical risk, and recommends workablecorrective actions.
• Communication and attention todetail: explains controls clearly, writes concise documentation, and checks thecompleteness and accuracy of evidence.
• Planning and ownership: manages arecurring control calendar alongside urgent audit requests and escalatessignificant issues promptly.
• Continuous improvement: investigatesrecurring bottlenecks, proposes practical changes, and measures whether adoptedchanges improve timeliness or quality.

Whatsuccess looks like

Scheduled control reviews are completed on time withclear evidence; access and control exceptions are identified and resolved;audit requests receive accurate, timely responses; policies reflect actualpractice; and the team can deliver recurring work consistently with appropriatereview and backup coverage.

Job Snapshot

Updated Date

10/04/2026

Job ID

Job_517

Location