Information Technology Audit Specialist

Filinvest Hospitality Corporation; Manila; On-site; PHP 700,000 - 1,000,000; Full time

Job summary

Filinvest Hospitality Corporation seeks an experienced Internal Auditor for IT systems to execute the internal audit plan, draft reports, and provide management with actionable recommendations. The role also covers fraud audits, risk assessments and system reviews as directed by the Audit Manager.

Candidates should have at least 5 years in information systems auditing, strong knowledge of COBIT/ISACA standards, and familiarity with SDLC, cybersecurity, and ERM related to IT.

Qualifications

• Bachelor's degree in Accounting or Finance with IT audit components or related field.
• Professional certifications like CISA or CISSP are a plus.
• Minimum 5 years of IS auditing experience with IT governance focus.

Responsibilities

• Execute internal audit engagements per annual IS audit plan and standards.
• Prepare reports with evidence-based working papers for management and Audit Committee.
• Monitor remediation and follow-up actions on audit recommendations.
• Support fraud audits, risk assessments, and system reviews as assigned.
• Keep updated on IT developments relevant to audit scope.

Skills

Information systems auditing

COBIT

IT governance

IT risk management

SDLC controls

Cybersecurity

Data analysis (Excel)

Auditing standards (ISACA/COBIT)

Education

Bachelor's degree in Accounting or Finance with IT audit components

Bachelor's degree in Computer Science / Information Technology

Tools

Excel

COBIT

ITIL

Job description

Job Summary

Responsible in the execution of internal audit plan producing reports and recommendations for the management and Audit Committee. The position is also in charge of the effective administration of any additional projects/activities (e.g. fraud audits, risk assessments, SOD and system review, among others) that the Audit Manager will assign.

Duties and Responsibilities

INTERNAL AUDIT:

• Independently carry out engagements in accordance with the Internal Audit – Information Systems Annual Audit Plan and known information systems (IS) standards, IS assets with focus on governance, security and business objectives alignment.
• Evaluate existing internal control systems and identify areas of improvement with a focus on information technology, systems and control.
• Support the development of risk based annual IS audit plan based on comprehensive planning and risk assessments.
• Prepare audit reports supported by evidence-based working papers to ensure adequate documentation.
• Monitor the implementation of audit remediation and recommendations.
• Conduct follow-up audits to monitor interventions from management.
• Keep up to date with technical developments for the business area.

Others:

• Perform any other tasks as requested by the Internal Audit Manager - IS and/or Head of Internal Audit.

Technical Competencies and Skills

• Minimum 5 years of experience in information systems auditing or related field; Understands auditing principles standards (e.g. COBIT) and methodologies;
• Knowledge and experience in the following areas: IT governance frameworks such as COBIT, ITIL, ISO/IEC 38500, IT infrastructure, applications and databases, Enterprise risk management (ERM) as it pertains to IT, Erp systems, IT-related risks including cybersecurity, data integrity, and business continuity.
• Understands software development lifecycle (SDLC) processes, change management controls and their impact on system integrity.

Information security, network architecture and security

• Strong understanding of auditing principles standards (e.g., ISACA, COBIT) and methodologies.
• Proficiency in planning, executing, and reporting on audits of IT systems, networks, and processes.
• Familiarity with risk-based audit approaches.
• Familiarity with IT infrastructure components including servers, databases, and cloud platforms, and operational controls.
• Knowledge of incident response and crisis management procedures, business continuity plans and disaster recovery plans.
• Proficiency in using data analysis tools (e.g., Excel

Education, Trainings and Licenses Required

• Bachelor's degree in Accounting or Finance (with strong IT audit components); Computer Science, Information Technology or other related field.
• CISA (Certified Information Systems Auditor), Certified Information Systems Security Professional (CISSP)