IT Governance & Compliance Lead - Risk & Controls

PJ Lhuillier Group of Companies; Makati; On-site; PHP 700,000 - 1,100,000; Full time

Job summary

PJ Lhuillier Group of Companies is seeking an experienced IT Audit professional to lead audits focused on governance, risk, and regulatory compliance in Makati. The role ensures alignment with COBIT, ITIL, ISO 27001 and strengthens the IT control environment.

Responsibilities include reviewing IT policies, testing controls, and presenting findings to management to drive timely remediation actions and strengthen compliance posture.

Qualifications

• Bachelor's degree in Accounting, Information Systems, Information Technology, or related field.
• Has 5–6 years of experience in internal audit, IT audit, IT risk, compliance, or governance.
• Strong knowledge of IT governance frameworks (COBIT, ITIL) and regulations (e.g., BSP, Data Privacy Act).
• Good understanding of risk management, internal controls, and audit methodologies (IIA, ISACA).
• Possession of CISA, CRISC, or CGEIG is an advantage.
• Willing to work in Makati.

Responsibilities

• Leading audits focused on IT governance, regulatory compliance, and IT risk management.
• Reviewing IT policies, standards, and procedures for adequacy and regulatory alignment.
• Assessing IT risk management processes and alignment with business objectives.
• Evaluating compliance with regulatory requirements (BSP, Data Privacy Act).
• Testing IT governance and control activities to validate design and operating effectiveness.
• Preparing audit reports and presenting findings to management for remediation actions.

Skills

IT governance

Regulatory compliance

IT risk management

Internal audit

Audit methodologies

Education

Bachelor's degree in Accounting/IS/IT

Job description

PJ Lhuillier Group of Companies is seeking an experienced IT Audit professional to lead audits focused on governance, risk, and regulatory compliance in Makati. The role ensures alignment with COBIT, ITIL, ISO 27001 and strengthens the IT control environment.

Responsibilities include reviewing IT policies, testing controls, and presenting findings to management to drive timely remediation actions and strengthen compliance posture.