IT Audit Team Lead

Philippine Span Asia Carrier Corp. (Manila); Manila; On-site; PHP 1,000,000 - 1,500,000; Full time

Job summary

Philippine Span Asia Carrier Corp. (Manila) is seeking an IT Audit Team Lead to support the Internal Audit Division in assessing IT controls, information security, cybersecurity, data privacy, and technology-related risks.

The role will lead audit engagements, provide actionable recommendations, and ensure timely completion and follow-through of audit activities. The ideal candidate has a Bachelor’s degree in Information Technology, Computer Science, or a related field, at least 2 years IT audit

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• At least 2 years of IT Audit experience.
• CISA certification is preferred.
• Experience with financial systems and IT applications.
• Knowledge of IT audit methodologies and data privacy considerations.

Responsibilities

• Collaborate with IT Security, Risk & Compliance on information security initiatives.
• Apply Data Privacy Act RA 10173 considerations when assessing IT infrastructure and data risks.
• Evaluate IT internal controls and propose remediation strategies.
• Conduct IT audit procedures including application controls testing and security audits.
• Lead and manage IT audit programs and engagements.
• Review audit workpapers and conclusions for accuracy and completeness.
• Communicate audit results and recommendations to management.

Skills

IT Audit

Audit leadership

Education

Bachelor’s degree in Information Technology, Computer Science, or a related field

CISA certification

Job description

Job Summary

We are looking for an IT Audit Team Lead who will support the Internal Audit Division in assessing IT controls, information security, cybersecurity, data privacy, and technology-related risks. The role will lead audit engagements, provide actionable recommendations, and ensure timely completion and follow-through of audit activities.

Key Responsibilities

• Collaborate with the IT Security, Risk & Compliance team on information security and cybersecurity initiatives.

• Apply knowledge of the Data Privacy Act (RA 10173) and current cybersecurity trends in assessing IT infrastructure, systems, networks, and data-related risks.

• Evaluate the design and effectiveness of IT internal controls, identify risks and exposures, and recommend appropriate remediation strategies.

• Conduct IT audit procedures, including application controls testing, security audits, and IT control assessments.

• Lead and manage the overall execution of assigned IT audit programs and engagements.

• Review audit workpapers, supporting documentation, analyses, network diagrams, and audit conclusions for completeness and appropriateness.

• Communicate audit results and recommendations to the appropriate management stakeholders.

• Monitor management action plans and ensure timely resolution of identified audit findings.

• Conduct regular status meetings and ensure audit assignments are completed within agreed timelines.

• Track and follow up on outstanding audit recommendations and elevate unresolved items when necessary.

• Review the work and performance of assigned audit personnel and provide timely feedback and performance evaluations.

• Support the development of training programs and internal seminars to strengthen the competencies of the Audit Team.

• Contribute to the continuous improvement of Internal Audit workflows, methodologies, and compliance with applicable auditing standards.

• Maintain strict confidentiality of audit information and comply with company policies and Code of Conduct.

• Perform other related duties as may be assigned.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or a related field.

• At least 2 years of experience in IT Audit.

• CISA certification is preferred.

• Experience in financial systems and IT applications.

• Knowledge and experience in:

• IT audit methodologies

• Firewall and network controls

• Data Privacy Act (RA 10173)

• Information security and cybersecurity audits

• IT internal controls and risk assessment

• Strong analytical, communication, documentation, and problem-solving skills.

• Ability to lead audit engagements and effectively coordinate with different stakeholders.

Work Schedule | Set Up

• Fully On-site

• Monday to Friday | 8:00 AM – 6:40 PM