IT Audit Manager - Internal Audit

SM Retail Inc.; Pasay; On-site; PHP 1,200,000 - 2,100,000; Full time

Job summary

SM Retail Inc. is seeking an IT Audit Manager to strengthen governance, risk management, and internal controls across technology platforms.

You will lead IT audit engagements, assess ITGCs, cybersecurity controls, and regulatory compliance while partnering with business and technology teams to enhance security and reliability of critical systems. You will also oversee vulnerability assessments, advisory support for system implementations, and mentor junior IT auditors to ensure timely,

Qualifications

• Bachelor's degree or higher in a related field such as Computer Science, IT, IS, or accounting.
• Professional certifications like CISA, CISM, CIA, CPA, CRISC, or CISSP are highly preferred.
• 5+ years in IT Audit, Information Security, Technology Risk, Internal Audit, or related fields with leadership or project management experience.

Responsibilities

• Lead IT audit engagements across applications, infrastructure, cybersecurity, ERP systems, and tech-enabled processes.
• Evaluate ITGCs, application controls, cybersecurity controls, and IT governance processes.
• Identify risks, control gaps, and opportunities; provide practical recommendations.
• Assess compliance with policies, regulatory requirements, and frameworks (COBIT, NIST, ISO 27001, PCI DSS).
• Review cloud environments, digital initiatives, and system implementations for technology risks.
• Perform or supervise vulnerability assessments, access reviews, and network security checks.
• Provide advisory support during system implementations to embed controls.
• Prepare and present audit findings to senior management and track action plans.

Skills

Leadership

Project management

Stakeholder management

Communication

Report-writing

Data analytics

Education

Bachelor's degree in Computer Science, Information Technology, Information Systems, Accountancy, or related discipline

Tools

ACL

IDEA

Power BI

SQL

Job description

Join SM Retail as an IT Audit Manager and play a key role in strengthening the organization's technology governance, risk management, and internal control environment. You will lead IT audit engagements, assess technology and cybersecurity risks, and partner with business and technology teams to enhance the security, reliability, and effectiveness of critical systems. This role offers the opportunity to work on emerging technologies, digital transformation initiatives, and enterprise-wide risk management projects.

What You'll Do

• Lead and execute IT audit engagements across applications, infrastructure, cybersecurity, ERP systems, and technology-enabled business processes.
• Evaluate the design and effectiveness of IT General Controls (ITGC), application controls, cybersecurity controls, and IT governance processes.
• Identify technology risks, control gaps, and process improvement opportunities, and provide practical recommendations to strengthen internal controls.
• Assess compliance with internal policies, regulatory requirements, and recognized frameworks such as COBIT, NIST, ISO 27001, PCI DSS, and related standards.
• Review emerging technologies, cloud environments, digital initiatives, and system implementations to identify potential technology risks.
• Perform or oversee technical reviews including vulnerability assessments, access management reviews, network security assessments, and other IT-related audits.
• Provide advisory support during system implementations and major technology initiatives to ensure appropriate controls are embedded.
• Prepare and present audit reports, communicate findings to senior management, and monitor the timely completion of agreed action plans.
• Coach and mentor IT auditors while ensuring audit engagements are completed in accordance with professional standards and established timelines.

What We're Looking For

• Bachelor's degree in Computer Science, Information Technology, Information Systems, Accountancy, or a related discipline.
• At least 5 years of experience in IT Audit, Information Security, Technology Risk, Internal Audit, or related fields, with leadership or project management experience.
• Professional certifications such as CISA, CISM, CIA, CPA, CRISC, or CISSP are highly preferred.
• Strong understanding of IT governance, IT General Controls (ITGC), cybersecurity, information security, and risk management frameworks.
• Experience auditing ERP systems, cloud environments, databases, networks, and enterprise applications is an advantage.
• Experience in cybersecurity, cybersecurity auditing, or assessing cybersecurity risks and controls is highly preferred.
• Familiarity with data analytics and audit tools (e.g., ACL, IDEA, Power BI, SQL, or similar) is an advantage.
• Excellent analytical, stakeholder management, communication, and report-writing skills.
• Ability to manage multiple audit engagements and collaborate effectively with cross-functional teams.