IT Audit Officer

Paynamics Technologies Inc.; Philippines; Hybrid; PHP 600,000 - 1,000,000; Full time

Job summary

Paynamics Technologies Inc. in Makati City is seeking an IT Audit Officer to lead IT governance, risk assessment, and controls for our hybrid workplace.

You will apply ISO 27001, BSP guidelines, and industry best practices to strengthen security and resilience of our fintech platforms. Responsibilities include conducting ITGC and cybersecurity audits, regulatory compliance reviews, and producing precise audit reports.

Qualifications

• 3–5 years of IT audit, IT risk management, or cybersecurity review experience.
• Hands-on experience with cloud security audits and regulatory compliance.
• Strong knowledge of ISO 27001, NIST 800-53, COBIT, COSO, and BSP guidelines.
• Excellent analytical, communication, and stakeholder management skills.

Responsibilities

• Assess IT governance structures, policies, and risk management frameworks in line with ISO 27001, BSP guidelines, and industry best practices.
• Conduct IT risk assessments and cybersecurity audits, including cloud security, API security, and vulnerability assessments.
• Perform regulatory compliance reviews to ensure IT systems meet standards and identify control gaps.
• Prepare audit reports and manage multiple engagements, delivering outputs on time.

Job description

Join Our Team at Paynamics Technologies Inc.!

Company Description

As a BSP-licensed Electronic Money Issuer and Registered Operator of Payment Systems, Paynamics is a trusted leader in the fintech space.

We deliver end-to-end payment infrastructure that empowers every layer of the economy—from SMEs and conglomerates to government agencies and financial institutions. Whether its payment acceptance, disbursement, or full wallet ecosystems, our modular platforms are designed to address the complexities of scale, compliance, and interoperability.

Through our secure and innovative technologies, we help shape and empower the Philippines digital landscape—driving financial inclusion, enabling digital transformation, and building a more connected, digital-first economy.

Job Title: IT Audit Officer

Location: Makati City

Job Type: Full-time

Work Set-up: Hybrid

Job Description

IT Governance & Risk Assessment

• Assess IT governance structures, policies, and risk management frameworks in line with ISO 27001, BSP guidelines, and industry best practices.
• Evaluate IT general controls (ITGCs), application controls, and key business processes.

IT & Cybersecurity Audits

• Conduct IT risk assessments and cybersecurity audits, including cloud security, API security, and vulnerability assessments.
• Review compliance with ISO 27001, NIST 800-53, and BSP IT Risk Management requirements.

Regulatory Compliance

• Perform compliance reviews to ensure IT systems and processes meet regulatory and industry standards.
• Identify control gaps and recommend improvements to enhance security and operational resilience.

Audit Reporting & Stakeholder Engagement

• Prepare accurate, well-documented audit reports and recommendations.
• Manage multiple audit engagements and deliver outputs on time.
• Build strong working relationships with auditees and key stakeholders.

Continuous Improvement

• Support the Information Security Management System (ISMS) by following documented processes, maintaining audit records, and contributing to continuous improvement initiatives.

Qualifications

• Bachelors degree in Information Technology, Information Systems, Computer Science, or Accounting.
• 3–5 years of experience in IT audit, IT risk management, or cybersecurity reviews.
• CISA certification preferred (CPA or CIA is an advantage).
• Hands‑on experience with cloud security audits and regulatory compliance.
• Strong knowledge of ISO 27001, NIST 800‑53, COBIT, COSO, and BSP guidelines.
• Excellent analytical, communication, and stakeholder management skills.

By applying, you authorize the company to process your personal information solely for recruitment purposes, in accordance with applicable data protection regulations.