IT Governance and Compliance Officer

PJ Lhuillier Group of Companies; Philippines; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

PJ Lhuillier Group of Companies is seeking an IT Audit Lead to oversee audits focused on IT governance, regulatory compliance, and IT risk management. The role ensures alignment with COBIT, ITIL, ISO 27001 and BSP and Data Privacy Act requirements.

The successful candidate will review IT policies, assess risk, test controls, prepare reports for management, and drive remediation actions across the organization.

Qualifications

• Bachelor's degree in Accounting, Information Systems, Information Technology, or related field.
• 5–6 years of experience in internal IT audit, IT risk, compliance, or governance.
• Strong knowledge of IT governance frameworks (COBIT, ITIL) and regulations (BSP, Data Privacy Act).
• Good understanding of risk management, internal controls, and audit methodologies (IIA, ISACA).
• Possession of CISA, CRISC, or CGEIT is an advantage.
• Willing to work in Makati.

Responsibilities

• Lead audits focusing on IT governance, regulatory compliance, and IT risk management.
• Review IT policies, standards, and procedures for adequacy and alignment with requirements.
• Assess IT risk management processes and strengthen governance practices.
• Evaluate compliance with regulatory requirements to reduce risk exposure.
• Test IT controls to validate design and operating effectiveness.
• Prepare audit reports and present findings to management for remediation actions.

Skills

IT audit

Regulatory compliance

Risk management

IT governance

Audit reporting

CISA

CRISC

CGEIT

Education

Bachelor's degree in Accounting/IS/IT

Job description

The position is primarily responsible for leading audits focused on IT governance, regulatory compliance, and IT risk management, ensuring alignment with industry frameworks (COBIT, ITIL, ISO 27001) and regulatory requirements while strengthening the organization’s IT control environment.

Duties and Responsibilities:

• Experienced in reviewing IT policies, standards, and procedures to assess adequacy and effectiveness and ensure alignment with organizational and regulatory requirements
• Skilled in assessing IT risk management processes and their alignment with business objectives to strengthen risk mitigation and governance practices
• Knowledgeable in evaluating compliance with regulatory requirements (e.g., BSP, Data Privacy Act, internal policies) to ensure adherence and reduce compliance risk exposure
• Proficient in testing IT governance and control activities (e.g., risk assessments, policy enforcement) to validate control design and operating effectiveness
• Analytical in identifying control gaps, root causes, and recommending process improvements to strengthen the IT control environment and enhance operational effectiveness
• Effective in preparing audit reports and presenting findings to management to support decision-making and timely remediation actions

Qualifications:

• Bachelor’s degree in Accounting, Information Systems, Information Technology, or related field
• Has 5–6 years of experience in internal audit, IT audit, IT risk, compliance, or governance
• Strong knowledge of IT governance frameworks (COBIT, ITIL) and regulations (e.g., BSP, Data Privacy Act)
• Good understanding of risk management, internal controls, and audit methodologies (IIA, ISACA)
• Possession of CISA, CRISC, or CGEIG is an advantage
• Willing to work in Makati