IT Governance Assistant Manager

Hammerjack Pty Ltd; Philippines; On-site; PHP 700,000 - 1,100,000; Full time

Job summary

Hammerjack Pty Ltd in the Philippines is seeking an IT Governance, Risk and Compliance (GRC) professional to support implementation, monitoring, and continuous improvement of GRC programs, ensuring compliance with policies, regulatory obligations, audits, and information security standards.

You will coordinate audits, develop and maintain governance frameworks, and track remediation actions, KPIs, and board materials, with a focus on ISO 27001, COBIT, ITIL and NIST guidelines, while

Qualifications

• Bachelor's degree in IT, information security, or related field.
• 4+ years experience in IT governance, IT audit, compliance, risk management or information security.
• Experience supporting ISO 27001 compliance initiatives and audits.
• Knowledge of IT controls, policies, and governance frameworks.
• Strong analytical, documentation, and report-writing skills.
• Excellent communication and stakeholder management abilities.
• Certification in ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CGEIT, or ITIL is a plus.

Responsibilities

• Monitor compliance with IT policies, standards, procedures, and regulatory requirements
• Coordinate internal and external audit activities, including evidence gathering, validation, issue tracking, and remediation follow-up
• Support development and maintenance of IT policies, procedures, and governance frameworks
• Assist in ISO 27001 compliance initiatives
• Conduct quality assurance reviews of Service Desk tickets, change management, and other compliance processes
• Monitor governance processes to identify gaps and propose improvements
• Prepare governance reports, dashboards, KPIs, and management presentations
• Track compliance metrics, audit findings, and remediation actions
• Lead Technology Board activities and coordinate follow-up
• Support governance communications and stakeholder coordination

Skills

IT Governance

IT Audit

Compliance

Risk Management

Information Security

Stakeholder Management

Documentation & Reporting

Communication

Education

Bachelor's degree in Information Technology / Information Security / Computer Science

Tools

ISO 27001

COBIT

ITIL

NIST

Job description

Job Summary:

Supports the implementation, monitoring, and continuous improvement of IT Governance, Risk, and Compliance (GRC) programs to ensure adherence to organizational policies, regulatory requirements, audit obligations, and information security standards.

Key Responsibilities:

• -Monitor compliance with IT policies, standards, procedures, and regulatory requirements
• -Coordinate internal and external audit activities, including evidence gathering, validation, issue tracking, and remediation follow-up
• -Support the development, review, communication, and maintenance of IT policies, procedures, and governance frameworks
• -Assist in the implementation and monitoring of compliance initiatives such as ISO 27001, SoQM, and other governance programs
• -Conduct quality assurance reviews of Service Desk tickets, Change Management Requests, manpower reconciliations, and other compliance-related processes
• -Monitor operational and governance processes to identify compliance gaps and recommend corrective actions and process improvements
• -Prepare governance reports, dashboards, key performance indicators (KPIs), and management presentations
• -Track compliance metrics, audit findings, action plans, risk remediation activities, and status updates
• -Lead and coordinate Technology Board activities, including agenda preparation, documentation, and follow-up of action items
• -Support governance-related communications, awareness initiatives, stakeholder coordination, and other administrative activities as required

Qualifications:

• -Bachelor's degree in Information Technology, Information Systems, Computer Science, Information Security or a related field
• -Preferably with more than 4 years of experience in IT Governance, IT Audit, Compliance, Risk Management, or Information Security
• -With hands-on experience in IT Audit, including audit preparation, evidence gathering, control testing, and remediation tracking
• -With experience supporting or implementing ISO 27001 compliance initiatives
• -Has knowledge of IT controls, policies, procedures, and governance frameworks
• -Possesses strong analytical, documentation, and report-writing skills
• -Good communication and stakeholder management skills
• -Preferably with experience participating in ISO 27001 certification, surveillance, or recertification audits.
• -Preferably familiar with governance and compliance frameworks such as ISO 27001, COBIT, ITIL, NIST
• -Preferably with experience in internal or external audit coordination
• -Preferably with experience in quality assurance reviews, policy development, and process improvement initiatives
• -Preferably has the following certifications: ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA (Certified Information Systems Auditor), CRISC (Certified in Risk and Information Systems Control), CGEIT (Certified in the Governance of Enterprise IT), ITIL Foundation