Information System Auditor

City Savings Bank; Pasig; On-site; PHP 520,000 - 900,000; Full time

Job summary

City Savings Bank is seeking an IT Auditor to evaluate the organization’s technology infrastructure, internal controls, and data systems for security, efficiency, and regulatory compliance. The role involves testing ITGCs, assessing risks, and reporting findings to leadership.

The ideal candidate has 2–5 years of IT auditing experience, strong analytical and communication skills, and knowledge of network security.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Information Systems, or Accounting.
• Preferred certifications include ISACA CISA, CISSP, or CIA.
• 2–5 years in IT auditing, risk assessment, or information security.
• Strong analytical thinking, knowledge of network security, and clear communication.

Responsibilities

• Evaluate IT general controls (ITGC), application controls, and access permissions.
• Identify security gaps, system weaknesses, and data breach risks.
• Verify alignment with regulatory frameworks like SOX, NIST, or ISO standards.
• Document audit results, draft technical reports, and present recommendations to leadership.
• Follow up with IT teams to ensure issues are fixed.

Skills

Analytical thinking

Network security knowledge

Communication skills

Education

Bachelor’s degree in IT/CS/IS/Accounting

Job description

As an IT auditor evaluates an organization's technology infrastructure, internal controls, and data systems to ensure security, efficiency, and compliance with regulations. Tests and reviews computer systems, networks, and security controls. They report vulnerabilities and recommend risk-mitigation strategies to management.

Key Responsibilities

• Evaluate Controls: Test IT general controls (ITGC), application controls, and logical access permissions.
• Assess Risk: Identify security gaps, system weaknesses, and potential data breach risks.
• Ensure Compliance: Verify alignment with regulatory frameworks like SOX, NIST, or ISO standards.
• Report Findings: Document audit results, draft technical reports, and present recommendations to leadership.
• Track Remediation: Follow up with IT teams to ensure identified issues are fixed.

Requirements and Qualifications

• Education: Bachelor’s degree in Information Technology, Computer Science, Information Systems, or Accounting.
• Certifications: Preferred credentials include ISACA Certified Information Systems Auditor (CISA), CISSP, or CIA.
• Experience: 2 to 5 years in IT auditing, risk assessment, or information security.
• Skills: Strong analytical thinking, knowledge of network security, and clear communication skills.