IT Audit & Risk Lead: Cybersecurity & Compliance

Paynamics; Philippines; On-site; PHP 900,000 - 1,400,000; Full time

Job summary

Paynamics Technologies Inc. is seeking an experienced professional to lead IT governance and risk assessment activities, conduct cybersecurity audits, and ensure regulatory compliance.

You will evaluate IT controls, perform risk assessments, and help strengthen the ISMS in a fintech environment in the Philippines. The role involves preparing audit reports, engaging stakeholders, and delivering findings with clear improvements to security and resilience across cloud, network, and application

Qualifications

• Bachelor's degree in Information Technology, Information Systems, Computer Science, or Accounting.
• 3–5 years of experience in IT audit, IT risk management, or cybersecurity reviews.
• CISA certification preferred (CPA or CIA is an advantage).
• Hands-on experience with cloud security audits and regulatory compliance.
• Strong knowledge of ISO 27001, NIST 800-53, COBIT, COSO, and BSP guidelines.
• Excellent analytical, communication, and stakeholder management skills.

Responsibilities

• Assess IT governance structures, policies, and risk management frameworks in line with ISO 27001, BSP guidelines, and industry best practices.
• Evaluate IT general controls (ITGCs), application controls, and key business processes.
• Conduct IT risk assessments and cybersecurity audits, including cloud security, API security, and vulnerability assessments.
• Review compliance with ISO 27001, NIST 800-53, and BSP IT Risk Management requirements.
• Perform compliance reviews to ensure IT systems and processes meet regulatory and industry standards.
• Identify control gaps and recommend improvements to enhance security and operational resilience.
• Prepare accurate, well-documented audit reports and recommendations.
• Manage multiple audit engagements and deliver outputs on time.
• Build strong working relationships with auditees and key stakeholders.
• Support the Information Security Management System (ISMS) by following documented processes, maintaining audit records, and contributing to continuous improvement initiatives.

Skills

IT governance

IT risk assessment

Cybersecurity audits

IT audit

Education

Bachelor's degree in Information Technology/Information Systems/Computer Science/Accounting

Tools

ISO 27001

NIST 800-53

COBIT

COSO

BSP guidelines

Job description

Paynamics Technologies Inc. is seeking an experienced professional to lead IT governance and risk assessment activities, conduct cybersecurity audits, and ensure regulatory compliance.

You will evaluate IT controls, perform risk assessments, and help strengthen the ISMS in a fintech environment in the Philippines. The role involves preparing audit reports, engaging stakeholders, and delivering findings with clear improvements to security and resilience across cloud, network, and application