IT Audit Officer

Paynamics Technologies Inc.; Makati; Hybrid; PHP 600,000 - 880,000; Full time

Job summary

Paynamics Technologies Inc. in Makati is seeking an IT Audit Officer to strengthen governance, risk management, and cybersecurity controls within our BSP-licensed fintech environment.

The role covers IT governance assessment, ITGC reviews, cloud security, regulatory compliance, and audit reporting. Hybrid setup with collaboration across stakeholders to drive continuous improvement and secure operations.

Qualifications

• Bachelor's degree in IT/IS/CS/Accounting.
• 3–5 years of experience in IT audit, IT risk management, or cybersecurity reviews.
• CISA preferred; CPA or CIA is a plus.
• Hands-on cloud security audits and regulatory compliance.
• Knowledge of ISO 27001, NIST 800-53, COBIT, COSO, BSP guidelines.
• Excellent analytical, communication, and stakeholder management skills.

Responsibilities

• Assess IT governance structures, policies, and risk management frameworks in line with ISO 27001, BSP guidelines, and industry best practices.
• Evaluate IT general controls (ITGCs), application controls, and key business processes.
• Conduct IT risk assessments and cybersecurity audits, including cloud security, API security, and vulnerability assessments.
• Review compliance with ISO 27001, NIST 800-53, and BSP IT Risk Management requirements.
• Prepare accurate, well-documented audit reports and recommendations; manage engagements.
• Support ISMS by maintaining audit records and contributing to continuous improvement initiatives.

Skills

Analytical skills

Communication skills

Stakeholder management

Education

Bachelor's degree in Information Technology, Information Systems, Computer Science, or Accounting

Job description

Join Our Team at Paynamics Technologies Inc.!

Company Description

As a BSP-licensed Electronic Money Issuer and Registered Operator of Payment Systems, Paynamics is a trusted leader in the fintech space.

We deliver end-to-end payment infrastructure that empowers every layer of the economy—from SMEs and conglomerates to government agencies and financial institutions. Whether its payment acceptance, disbursement, or full wallet ecosystems, our modular platforms are designed to address the complexities of scale, compliance, and interoperability.

Through our secure and innovative technologies, we help shape and empower the Philippines digital landscape—driving financial inclusion, enabling digital transformation, and building a more connected, digital-first economy.

Job Title: IT Audit Officer

Location: Makati City

Job Type: Full-time

Work Set-up: Hybrid

Job Description

IT Governance & Risk Assessment

• Assess IT governance structures, policies, and risk management frameworks in line with ISO 27001, BSP guidelines, and industry best practices.
• Evaluate IT general controls (ITGCs), application controls, and key business processes.

IT & Cybersecurity Audits

• Conduct IT risk assessments and cybersecurity audits, including cloud security, API security, and vulnerability assessments.
• Review compliance with ISO 27001, NIST 800-53, and BSP IT Risk Management requirements.

Regulatory Compliance

• Perform compliance reviews to ensure IT systems and processes meet regulatory and industry standards.
• Identify control gaps and recommend improvements to enhance security and operational resilience.

Audit Reporting & Stakeholder Engagement

• Prepare accurate, well-documented audit reports and recommendations.
• Manage multiple audit engagements and deliver outputs on time.
• Build strong working relationships with auditees and key stakeholders.

Continuous Improvement

• Support the Information Security Management System (ISMS) by following documented processes, maintaining audit records, and contributing to continuous improvement initiatives.

Qualifications

• Bachelors degree in Information Technology, Information Systems, Computer Science, or Accounting.
• 3–5 years of experience in IT audit, IT risk management, or cybersecurity reviews.
• CISA certification preferred (CPA or CIA is an advantage).
• Hands‑on experience with cloud security audits and regulatory compliance.
• Strong knowledge of ISO 27001, NIST 800-53, COBIT, COSO, and BSP guidelines.
• Excellent analytical, communication, and stakeholder management skills.

By applying, you authorize the company to process your personal information solely for recruitment purposes, in accordance with applicable data protection regulations.