IT Audit Senior

Network One BPO Services Inc; Makati; On-site; PHP 900,000 - 1,400,000; Full time

Job summary

Network One BPO Services Inc is seeking a senior IT Audit professional in Metro Manila to lead end-to-end IT audit engagements. You will test SOX SOC controls, ITGCs/ITACs, and assess cybersecurity and API risks across complex environments.

The role requires mentoring junior staff and delivering formal findings with actionable recommendations. The ideal candidate has 5+ years in IT Audit or Risk Advisory and holds or progresses toward certifications such as CISA, CISSP, CRISC, or CIA.

Qualifications

• Bachelor’s degree in IS / CS / cybersecurity / accounting or related field.
• Professional designations such as CISA, CISSP, CRISC, CIA or measured progress toward such designations.
• 5+ years of IT Audit, IT Risk, Cybersecurity, or Risk Advisory experience.
• Strong experience with SOX and SOC compliance testing, ITGCs and ITACs.
• Knowledge of APIs and system integrations, cybersecurity concepts and risk assessments.

Responsibilities

• Lead and execute IT audit engagements, including planning, testing, and reporting.
• Assess and test SOX IT controls, SOC 1/SOC 2 controls, ITGCs, ITACs, automated controls, and IPE.
• Evaluate key technology risks related to access management, change management, IT operations, backup and recovery, and system interfaces.
• Review cybersecurity programs, vulnerability assessments, penetration testing results, incident response processes, and cloud security controls.
• Assess APIs, system integrations, ERP applications, and technology environments to identify control gaps and security risks.
• Support audit documentation, walkthroughs, control testing, and issue tracking.
• Manage, coach, and review the work of junior team members.
• Formalize findings and recommendations.

Skills

IT audit

SOX testing

ITGCs

ITACs

Access management

Cybersecurity risk

Education

Bachelor's degree in Information Systems / CS / Cybersecurity / Accounting

CISA / CISSP / CRISC / CIA or progress toward

Job description

• Lead and execute IT audit engagements, including planning, testing, and reporting.
• Assess and test SOX IT controls, SOC 1/SOC 2 controls, ITGCs, ITACs, automated controls, and IPE.
• Evaluate key technology risks related to access management, change management, IT operations, backup and recovery, and system interfaces.
• Review cybersecurity programs, vulnerability assessments, penetration testing results, incident response processes, and cloud security controls.
• Assess APIs, system integrations, ERP applications, and technology environments to identify control gaps and security risks.
• Support audit documentation, walkthroughs, control testing, and issue tracking.
• Manage, coach, and review the work of junior team members.
• Formalize findings and recommendations.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Internal Audit or related field.
• Professional designations such as CISA, CISSP, CRISC, CIA, etc., or measured progress in achieving such designations
• 5+ years of experience in IT Audit, IT Risk, Cybersecurity, or Risk Advisory.
• Strong experience with:
• SOX and SOC compliance testing
• ITGCs and ITACs
• User access reviews
• Change management and IT operations controls
• Cybersecurity and technology risk assessments
• Good understanding of:
• APIs and system integrations
• Cybersecurity concepts and penetration testing
• Experience managing and mentoring audit teams
• Strong analytical, deductive, problem solving, and critical thinking skills