IT Audit Manager - Security & Risk Leader (Onsite)

SM Prime Holdings, Inc.; Pasay; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

SM Prime Holdings, Inc. is seeking an experienced IT Auditor to perform IT audit engagements in line with the annual audit plan. The role involves planning and executing IT audit projects, reviewing data, information, and systems security, and ensuring proper documentation of findings and conclusions.

Onsite work is required at Mall of Asia Complex, Pasay City, Philippines. The ideal candidate has 5–7 years' IT audit/IT security experience, familiarity with ISO 27K, PCI DSS, and related

Qualifications

• Bachelor's/College degree in relevant field.
• 5–7 years of IT audit and IT security experience.
• Audit experience in Data Privacy, Information Security, Data Center, SAP, SDLC, and penetration testing.

Responsibilities

• Carry out IT audit engagements per the annual audit plan.
• Assist in planning and execution of IT audit projects.
• Review data, information, systems security, back-up, disaster recovery, business continuity, and IT operations.
• Audit against standards such as ISO 27001, PCI DSS, etc.
• Prepare audit findings and working papers with adequate documentation.
• Follow up on audit findings to verify corrective actions.
• Consult with departments on IT systems and business solutions.

Skills

IT audit

Data privacy

Information security

Risk management

Governance

Education

Bachelor's/College Degree in Computer Science/Information Technology/Engineering/Finance/Accountancy/Mathematics

Tools

SAP

SDLC

Penetration testing

Job description

SM Prime Holdings, Inc. is seeking an experienced IT Auditor to perform IT audit engagements in line with the annual audit plan. The role involves planning and executing IT audit projects, reviewing data, information, and systems security, and ensuring proper documentation of findings and conclusions.

Onsite work is required at Mall of Asia Complex, Pasay City, Philippines. The ideal candidate has 5–7 years' IT audit/IT security experience, familiarity with ISO 27K, PCI DSS, and related