IT Audit Officer (Hybrid) – Risk & Cybersecurity Lead

Paynamics Technologies Inc.; Makati; Hybrid; PHP 600,000 - 880,000; Full time

Job summary

Paynamics Technologies Inc. in Makati is seeking an IT Audit Officer to strengthen governance, risk management, and cybersecurity controls within our BSP-licensed fintech environment.

The role covers IT governance assessment, ITGC reviews, cloud security, regulatory compliance, and audit reporting. Hybrid setup with collaboration across stakeholders to drive continuous improvement and secure operations.

Qualifications

• Bachelor's degree in IT/IS/CS/Accounting.
• 3–5 years of experience in IT audit, IT risk management, or cybersecurity reviews.
• CISA preferred; CPA or CIA is a plus.
• Hands-on cloud security audits and regulatory compliance.
• Knowledge of ISO 27001, NIST 800-53, COBIT, COSO, BSP guidelines.
• Excellent analytical, communication, and stakeholder management skills.

Responsibilities

• Assess IT governance structures, policies, and risk management frameworks in line with ISO 27001, BSP guidelines, and industry best practices.
• Evaluate IT general controls (ITGCs), application controls, and key business processes.
• Conduct IT risk assessments and cybersecurity audits, including cloud security, API security, and vulnerability assessments.
• Review compliance with ISO 27001, NIST 800-53, and BSP IT Risk Management requirements.
• Prepare accurate, well-documented audit reports and recommendations; manage engagements.
• Support ISMS by maintaining audit records and contributing to continuous improvement initiatives.

Skills

Analytical skills

Communication skills

Stakeholder management

Education

Bachelor's degree in Information Technology, Information Systems, Computer Science, or Accounting

Job description

Paynamics Technologies Inc. in Makati is seeking an IT Audit Officer to strengthen governance, risk management, and cybersecurity controls within our BSP-licensed fintech environment.

The role covers IT governance assessment, ITGC reviews, cloud security, regulatory compliance, and audit reporting. Hybrid setup with collaboration across stakeholders to drive continuous improvement and secure operations.