IT Audit Specialist

Macroasia Corporation; Makati; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Macroasia Corporation's Internal Audit Department seeks an IT Audit Specialist to evaluate and audit technology infrastructure, systems, and processes for compliance, efficiency, and security. You will review IT controls, analyze data, identify risks, and recommend improvements to mitigate vulnerabilities.

You will assist in engagement planning, execute the audit work program, and participate in audit result discussions. Strong English communication is essential.

Qualifications

• BS Information Technology or BS Accountancy (or related finance course) with IT audit experience.
• Preferably with ITGC and application controls experience.
• Strong verbal and written English communication.

Responsibilities

• Develop and execute IT audit plans and procedures based on risk assessments.
• Audit IT systems, networks, security policies, and infrastructure.
• Evaluate operating effectiveness of system and data security controls.
• Document audit results in working papers and prepare reports.
• Discuss findings and recommendations with management.
• Stay updated on standards and best practices to ensure compliance.

Skills

IT Audit

Risk assessment

Audit procedures

IT security controls

English communication

Education

BS Information Technology or BS Accountancy

Job description

Job Summary: Working under Internal Audit Department, the role is responsible for evaluating and auditing the organization's technology infrastructure, systems, and processes to ensure compliance, efficiency, security. This involves reviewing IT systems analyzing data, identifying risks, and recommending improvements to enhance operations and mitigate vulnerabilities. The IT Audit Specialist shall ensure that the internal controls are effective and aligned with organizational objectives, as well as regulatory and industry standards. This position assists in the preparation of the engagement plan, assist in the execution of the audit work program and participate in the discussion of audit results.

Duties and Responsibilities:

• Develop and execute plans and procedures based on risk assessments.
• Perform audits of IT systems, networks, security policies, and infrastructure.
• Evaluate and conclude upon the operating effectiveness of operating system/database security, user security, segregation of duties, interface security/error monitoring, systems change management, and IT risk posture of 3rd party service providers, among others.
• Evaluate system security, and operational efficiency of IT systems.
• Perform external vulnerability and internal infrastructure/application security assurance reviews.
• Document results of audit procedures in the form of audit working papers.
• Prepare and maintain audit reports, documenting findings, recommendations, and the status of corrective actions.
• Recommend improvements to enhance operations and mitigate vulnerabilities.
• Participates in discussion of audit results.
• Stay updated on the latest industry standards, regulations, and best practices to ensure the company remains complaint.

Education and Work Experience Requirements:

• BS Information Technology or BS Accountancy (or Finance-related Course) with experience in IT Audit
• Preferably with direct experience in IT (at least 6 months)
• Preferably with experience in ITGC (IT General Controls - change management controls, access security/security management or IT operations), and Application Controls
• Must have strong verbal and written English Communication skills with a structured manner off thinking/communication
• Must be willing to travel to subsidiaries for audit engagements