IT Auditor

ACCLIME RISK ADVISORY PTE. LTD.; Santo Niño 1st; On-site; PHP 500,000 - 900,000; Full time

Job summary

ACCLIME RISK ADVISORY PTE. LTD. is seeking an IT Auditor to conduct IT audits across multiple clients and industries, assess the adequacy of IT controls, and ensure compliance with standards, regulations and internal policies.

The ideal candidate has solid knowledge of IT systems, information security and audit procedures, with a CISA certification preferred; travel to client premises is required. Experience with COBIT, ISO/IEC 27001, and data protection assessments is a plus, and strong

Qualifications

• Bachelor's degree in IT/CS/Cybersecurity or related field is required.
• Accounting or Auditing background is an added advantage.
• CISA certification is required for candidates without other relevant certs.
• Other relevant certifications such as CIA, CISM, CISSP, CRISC are welcomed.

Responsibilities

• Evaluate IT controls across diverse environments and industries.
• Conduct IT audits to check regulatory compliance and internal policies.
• Identify IT risks and control weaknesses; propose improvements.
• Develop IT audit scopes, programmes, risk assessments and procedures.
• Evaluate IT General Controls and application controls; suggest enhancements.
• Review user access, change management, IT operations, backups, and cyber security.
• Assess whether systems and controls support business processes and transactions.
• Review IT governance, cybersecurity and information security practices.
• Perform walkthroughs, interviews, document reviews and testing for evidence.
• Prepare working papers and reports detailing procedures, findings and recommendations.
• Discuss findings with client personnel and management; follow up on actions.
• Engage with internal audit, cybersecurity and other teams as needed.
• Perform ad-hoc duties and assignments as required.

Skills

IT auditing

IT governance

Information security

Audit procedures

Regulatory compliance

Analytical thinking

Report writing

English communication

Education

Bachelor's degree in Information Technology / Information Systems / Computer Science / Cybersecurity or related

Accounting or Auditing background (advantage)

Tools

COBIT

ISO/IEC 27001

NIST

Cyber Trust Mark

DPE assessments

Job description

Job Roles and Responsibilities:

The IT Auditor will be responsible for conducting IT audits across multiple clients and industries, assessing the adequacy and effectiveness of IT controls, identifying technology-related risks, and ensuring compliance with applicable standards, regulations and internal policies.

The ideal candidate will have a good understanding of IT systems, information security, business processes and audit procedures. Job responsibilities include:

IT Audit

• Evaluate the effectiveness of clients' IT controls across different industries, business processes, systems and technology environments.
• Conduct IT audits to assess compliance with applicable regulatory requirements, industry standards, internal policies and procedures.
• Identify and assess IT risks and control weaknesses, and recommend appropriate improvements or mitigating measures.
• Assist in developing IT audit scopes, audit programmes, risk assessments and audit procedures.
• Evaluate IT General Controls, application controls and other technology-related controls, and recommend improvements where appropriate.
• Review areas including user access management, change management, IT operations, backup and recovery, system development, cybersecurity, business continuity and third-party IT services, where applicable.
• Assess whether application systems and related controls adequately support business processes and transaction processing.
• Review relevant IT governance, cybersecurity and information security practices against applicable standards and frameworks.
• Perform walkthroughs, interviews, document reviews and control testing to obtain sufficient audit evidence.
• Prepare audit working papers and reports documenting audit procedures performed, findings identified and recommendations for improvement.
• Discuss audit findings and recommendations with client personnel and management.
• Perform follow-up reviews to assess the implementation status of agreed corrective actions.
• Prepare and present reports that reflect audit results and document the proposed process.
• Engage in continuous knowledge development regarding sector’s rules, regulations, best practices, tools, techniques, performance standards, relevant regulations, industry practices, technology risks, emerging technologies and audit methodologies.
• Collaborate with internal audit, cybersecurity and other engagement team members where necessary.
• Perform other ad-hoc duties and assignments as assigned.

Job Requirement:

• Bachelor's degree in Information Technology, Information Systems, Computer Science, Cybersecurity or a related field.
• Qualifications or academic background in Accounting, Auditing or related disciplines would be an added advantage.
• CISA (Certified Information Systems Auditor) certification is a minimum professional certification requirement for candidates who do not possess other relevant professional certifications.
• Candidates possessing other relevant professional certifications such as CIA, CISM, CISSP, CRISC, ISO/IEC 27001 Lead Auditor or equivalent will also be considered.
• Relevant experience in IT audit, technology risk, IT governance, IT compliance, internal audit or a similar role is preferred.
• Prior experience in performing IMDA SSIR audits, Cyber Trust Mark assessments, Cyber Essentials Mark assessments and/or Data Protection Essentials (DPE) assessments would be an added advantage.
• Good knowledge and understanding of IT systems, IT controls, information security and IT risk management.
• Familiarity with IT standards and frameworks such as COBIT, ISO/IEC 27001, NIST or other relevant frameworks.
• Able to appreciate business process issues and understand business transaction scenarios and how application systems support business operations.
• Strong analytical and problem-solving skills.
• Good audit documentation and report-writing skills.
• Excellent communication skills in both oral and written English.
• Resourceful and able to work independently with appropriate supervision.
• Logical thinking, good attitude, fast learner and good team player.
• Able to handle multiple tasks and assignments.
• Able to work under pressure and meet deadlines.
• Willing to travel to client premises where required.