IT Audit Officer

Paynamics; Philippines; On-site; PHP 900,000 - 1,400,000; Full time

Job summary

Paynamics Technologies Inc. is seeking an experienced professional to lead IT governance and risk assessment activities, conduct cybersecurity audits, and ensure regulatory compliance.

You will evaluate IT controls, perform risk assessments, and help strengthen the ISMS in a fintech environment in the Philippines. The role involves preparing audit reports, engaging stakeholders, and delivering findings with clear improvements to security and resilience across cloud, network, and application

Qualifications

• Bachelor's degree in Information Technology, Information Systems, Computer Science, or Accounting.
• 3–5 years of experience in IT audit, IT risk management, or cybersecurity reviews.
• CISA certification preferred (CPA or CIA is an advantage).
• Hands-on experience with cloud security audits and regulatory compliance.
• Strong knowledge of ISO 27001, NIST 800-53, COBIT, COSO, and BSP guidelines.
• Excellent analytical, communication, and stakeholder management skills.

Responsibilities

• Assess IT governance structures, policies, and risk management frameworks in line with ISO 27001, BSP guidelines, and industry best practices.
• Evaluate IT general controls (ITGCs), application controls, and key business processes.
• Conduct IT risk assessments and cybersecurity audits, including cloud security, API security, and vulnerability assessments.
• Review compliance with ISO 27001, NIST 800-53, and BSP IT Risk Management requirements.
• Perform compliance reviews to ensure IT systems and processes meet regulatory and industry standards.
• Identify control gaps and recommend improvements to enhance security and operational resilience.
• Prepare accurate, well-documented audit reports and recommendations.
• Manage multiple audit engagements and deliver outputs on time.
• Build strong working relationships with auditees and key stakeholders.
• Support the Information Security Management System (ISMS) by following documented processes, maintaining audit records, and contributing to continuous improvement initiatives.

Skills

IT governance

IT risk assessment

Cybersecurity audits

IT audit

Education

Bachelor's degree in Information Technology/Information Systems/Computer Science/Accounting

Tools

ISO 27001

NIST 800-53

COBIT

COSO

BSP guidelines

Job description

Join Our Team at Paynamics Technologies Inc.!

Company Description

As a BSP-licensed Electronic Money Issuer and Registered Operator of Payment Systems, Paynamics is a trusted leader in the fintech space.

We deliver end-to-end payment infrastructure that empowers every layer of the economy—from SMEs and conglomerates to government agencies and financial institutions. Whether its payment acceptance, disbursement, or full wallet ecosystems, our modular platforms are designed to address the complexities of scale, compliance, and interoperability.

Through our secure and innovative technologies, we help shape and empower the Philippines digital landscape—driving financial inclusion, enabling digital transformation, and building a more connected, digital-first economy.

Job Description

IT Governance & Risk Assessment

• Assess IT governance structures, policies, and risk management frameworks in line with ISO 27001, BSP guidelines, and industry best practices.
• Evaluate IT general controls (ITGCs), application controls, and key business processes.

IT & Cybersecurity Audits

• Conduct IT risk assessments and cybersecurity audits, including cloud security, API security, and vulnerability assessments.
• Review compliance with ISO 27001, NIST 800-53, and BSP IT Risk Management requirements.

Regulatory Compliance

• Perform compliance reviews to ensure IT systems and processes meet regulatory and industry standards.
• Identify control gaps and recommend improvements to enhance security and operational resilience.

Audit Reporting & Stakeholder Engagement

• Prepare accurate, well-documented audit reports and recommendations.
• Manage multiple audit engagements and deliver outputs on time.
• Build strong working relationships with auditees and key stakeholders.
• Support the Information Security Management System (ISMS) by following documented processes, maintaining audit records, and contributing to continuous improvement initiatives.
  

Qualifications:

• Bachelors degree in Information Technology, Information Systems, Computer Science, or Accounting.
• 3–5 years of experience in IT audit, IT risk management, or cybersecurity reviews.
• CISA certification preferred (CPA or CIA is an advantage).
• Hands‑on experience with cloud security audits and regulatory compliance.
• Strong knowledge of ISO 27001, NIST 800-53, COBIT, COSO, and BSP guidelines.
• Excellent analytical, communication, and stakeholder management skills.

By applying, you authorize the company to process your personal information solely for recruitment purposes, in accordance with applicable data protection regulations.