IT Audit Lead: Controls, Risk & Cybersecurity

Nexus Recruitment Group; Makati; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Nexus Recruitment Group is seeking an experienced IT Audit Assistant Manager to support planning and execution of IT audit engagements across systems and processes. You will assess IT risks, controls, and compliance, supervising junior staff and communicating findings to stakeholders.

The ideal candidate has 5–7 years in IT audit or technology risk, strong ITGC and application controls knowledge, and familiarity with frameworks like NIST and ISO 27001. CISA/CRISC is a plus.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field.
• 5–7 years of IT audit, technology risk, or related assurance experience.
• Strong ITGC and application controls knowledge; cybersecurity frameworks familiarity.
• Experience with ERP systems (SAP, Oracle, Workday) is a plus.
• CISA/CRISC or similar IT audit credentials are preferred.

Responsibilities

• Assist in planning, scoping, and delivering IT audit engagements per standards.
• Evaluate IT general controls and application controls across systems.
• Perform risk assessments, cloud, cybersecurity, and infrastructure audits.
• Lead and supervise junior auditors, review working papers.
• Prepare reports, present findings and remediation recommendations.
• Collaborate cross-functionally to close control gaps and raise audit readiness.
• Support SOX/regulatory testing, evidence collection, and documentation.
• Stay updated on cybersecurity trends and IT risk management practices.

Skills

IT audit

ITGC

Cybersecurity

Risk assessment

Leadership

Stakeholder communication

Education

Bachelor's degree in Information Systems/Computer Science/Accounting

Tools

SAP

Oracle

Workday

Job description

Nexus Recruitment Group is seeking an experienced IT Audit Assistant Manager to support planning and execution of IT audit engagements across systems and processes. You will assess IT risks, controls, and compliance, supervising junior staff and communicating findings to stakeholders.

The ideal candidate has 5–7 years in IT audit or technology risk, strong ITGC and application controls knowledge, and familiarity with frameworks like NIST and ISO 27001. CISA/CRISC is a plus.