IT Governance and Compliance Auditor

PJ Lhuillier Group of Companies; Makati; On-site; PHP 700,000 - 1,100,000; Full time

Job summary

PJ Lhuillier Group of Companies in Makati seeks an IT Audit Leader to oversee audits of IT governance, regulatory compliance, and IT risk management, ensuring alignment with COBIT, ITIL, ISO 27001 and strengthening the IT control environment.

The role requires 5–6 years in internal IT audit, IT risk, compliance, or governance, and a solid grasp of BSP and Data Privacy Act requirements. A Bachelor’s degree is required, and willingness to work in Makati is essential.

Qualifications

• Degree in Accounting/IS/IT or related field.
• 5–6 years in internal IT audit, IT risk, or governance.
• Knowledge of COBIT/ITIL and BSP/Data Privacy Act.
• Understanding of risk management and internal controls.
• Certifications such as CISA/CRISC are an advantage.
• Willing to work in Makati.

Responsibilities

• Review IT policies, standards, and procedures for adequacy and effectiveness.
• Assess IT risk management processes and alignment with business objectives.
• Evaluate regulatory compliance with BSP, Data Privacy Act, and internal policies.
• Test IT governance and control activities for design and operation.
• Identify control gaps, root causes, and recommend improvements.
• Prepare audit reports and present findings to management for remediation.

Skills

IT audit

Risk management

Regulatory compliance

IT governance

Audit methodologies

Education

Bachelor's degree in Accounting/Information Systems/Information Technology

Job description

The position is primarily responsible for leading audits focused on IT governance, regulatory compliance, and IT risk management, ensuring alignment with industry frameworks (COBIT, ITIL, ISO 27001) and regulatory requirements while strengthening the organization's IT control environment.

Duties and Responsibilities:

• Experienced in reviewing IT policies, standards, and procedures to assess adequacy and effectiveness and ensure alignment with organizational and regulatory requirements
• Skilled in assessing IT risk management processes and their alignment with business objectives to strengthen risk mitigation and governance practices
• Knowledgeable in evaluating compliance with regulatory requirements (e.g., BSP, Data Privacy Act, internal policies) to ensure adherence and reduce compliance risk exposure
• Proficient in testing IT governance and control activities (e.g., risk assessments, policy enforcement) to validate control design and operating effectiveness
• Analytical in identifying control gaps, root causes, and recommending process improvements to strengthen the IT control environment and enhance operational effectiveness
• Effective in preparing audit reports and presenting findings to management to support decision-making and timely remediation actions

Qualifications:

• Bachelor's degree in Accounting, Information Systems, Information Technology, or related field
• Has 5-6 years of experience in internal audit, IT audit, IT risk, compliance, or governance
• Strong knowledge of IT governance frameworks (COBIT, ITIL) and regulations (e.g., BSP, Data Privacy Act)
• Good understanding of risk management, internal controls, and audit methodologies (IIA, ISACA)
• Possession of CISA, CRISC, or CGEIG is an advantage
• Willing to work in Makati