IT Audit Assistant Manager (SOC 2) | Makati

HRTx Inc; Philippines; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

HRTx Inc in Makati is seeking an IT Assistant Audit Manager (SOC 2) to lead multiple engagement teams, delivering IT audits aligned with COBIT, NIST and ISO 27001 standards while supporting SOX 404 compliance.

You will oversee IT General Controls testing, manage budgets and timelines, and act as a trusted advisor to IT and C-suite stakeholders, driving remediation plans and cross-functional collaboration.

Qualifications

• Bachelor's degree in MIS, CS, Accounting, or related field.
• 5+ years IT Audit / IT Risk / Cybersecurity experience in professional services or Big 4.
• Deep understanding of ITGCs, SOC reporting, and network security protocols.
• Excellent written and verbal communication for presenting complex risks to non-technical stakeholders.

Responsibilities

• Lead the planning, execution, and reporting of IT audits, aligning with COBIT, NIST, ISO 27001 standards.
• Oversee IT General Controls testing and SOX 404-related assessments.
• Identify and evaluate complex IT risks related to systems, infrastructure, and data integrity.
• Review engagement workpapers for technical accuracy and evidence-based findings.
• Manage project budgets, resource allocation, and timelines for successful delivery.

Skills

SOC 2

ITGC

COBIT

NIST

ISO 27001

IT Audit

Cybersecurity

Communication

Education

Bachelor's degree in MIS/CS/Accounting or related field

Tools

ACL

Tableau

Power BI

SAP

Oracle

Job description

IT ASSISTANT AUDIT MANAGER (SOC 2)

Location: Makati

Work Schedule: Monday - Friday

The IT Assistant Audit Manager is responsible for leading multiple engagement teams, working with a wide variety of clients to deliver professional services and managing business development activities on strategic and global priority accounts specific to IT Audit engagements including IT control/SOX compliance and assessment, information security and data security.

Key Responsibilities

Engagement Management

• Lead the planning, execution, and reporting of IT audits, ensuring alignment with professional standards (COBIT, NIST, ISO 27001).
• Oversee IT General Controls (ITGC) testing and automated application control assessments for SOX 404 compliance.
• Identify and evaluate complex IT risks related to systems, infrastructure, and data integrity.
• Review engagement workpapers for technical accuracy and ensure all findings are supported by robust evidence.
• Manage project budgets, resource allocation, and timelines to ensure successful delivery.

Relationship Management

• Act as a trusted advisor to C-suite executives and IT leadership, providing insights on emerging technology risks and mitigation strategies.
• Facilitate closing meetings to discuss audit findings and negotiate remediation plans with stakeholders.
• Drive business development by identifying service gaps at existing accounts and leading the preparation of proposals for new clients.
• Collaborate with financial audit teams to provide integrated audit solutions.

People Management

• Supervise, coach, and mentor senior and staff-level auditors, providing consistent performance feedback.
• Facilitate internal training sessions on specialized topics such as Cloud Security, Data Privacy, and AI Governance.
• Foster an inclusive team environment and participate in the recruitment of top-tier technical talent.

Qualifications

• Education: Bachelor's degree in Management Information Systems (MIS), Computer Science, Accounting, or a related field.
• Experience: 5+ years of experience in IT Audit, IT Risk Management, or Cybersecurity, preferably within a professional services or "Big 4" environment.
• Technical Knowledge: Deep understanding of ITGCs, SOC reporting, and network security protocols.
• Communication: Exceptional written and verbal communication skills for presenting complex technical risks to non-technical stakeholders.

Preferred Qualifications

• Certifications: Professional certification such as SOC 2 (required) CISA, CIA, CISSP, or CPA.
• ERP/Apps: Relevant experience in application security and ERP implementation projects (e.g., SAP, Oracle).
• Cloud/Data: Experience auditing cloud environments (AWS, Azure) and using data analytics tools (ACL, Tableau, PowerBI).