IT & Cyber Risk Audit Associate

SM Retail Inc.; Pasay; On-site; PHP 279,000 - 446,000; Full time

Job summary

SM Retail Inc. is seeking an IT Audit Analyst to support the Internal Audit function by providing technical expertise in technology-focused audits.

The role involves assessing cloud environments, databases, networks, cybersecurity controls, and development processes under the guidance of the Internal Audit team. Responsibilities include reviewing configurations, access controls, logs, and other evidence, performing testing, and documenting findings with actionable recommendations.

Qualifications

• Fresh graduates with a bachelor’s degree in IT, CS, IS, CE, Cybersecurity, or related field.
• Foundational understanding of operating systems, networks, databases, cloud computing, and information security.
• Strong analytical, investigative, and problem-solving skills.
• Good written and verbal communication skills.
• Curious, detail-oriented, and eager to learn IT audit, cybersecurity, risk management, and internal controls.

Responsibilities

• Assist IT audit engagements and technical assessments.
• Review system configurations, access controls, logs, and other technical evidence.
• Help assess risks involving cloud environments, databases, networks, cybersecurity, and system development.
• Perform technical testing and data analysis to identify potential risks and control gaps.
• Document findings and contribute recommendations that strengthen technology controls.
• Keep up with emerging technologies and cybersecurity trends.

Skills

Analytical skills

Investigative skills

Problem-solving

Written communication

Verbal communication

Curious and detail-oriented

Education

Bachelor's degree in Information Technology

Bachelor's degree in Computer Science

Bachelor's degree in Information Systems

Bachelor's degree in Computer Engineering

Bachelor's degree in Cybersecurity

Related course or field

Job description

SM Retail Inc. is seeking an IT Audit Analyst to support the Internal Audit function by providing technical expertise in technology-focused audits.

The role involves assessing cloud environments, databases, networks, cybersecurity controls, and development processes under the guidance of the Internal Audit team. Responsibilities include reviewing configurations, access controls, logs, and other evidence, performing testing, and documenting findings with actionable recommendations.