IT Infrastructure and Security Auditor

PJ Lhuillier Group of Companies; Makati; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

PJ Lhuillier Group of Companies is seeking an experienced IT Audit professional to lead audits of IT infrastructure and cybersecurity environments. The role focuses on confidentiality, integrity, and availability across networks, servers, databases, and cloud setups.

The ideal candidate has 5–6 years in IT audit or cybersecurity, with knowledge of ISO 27001, NIST, CIS Controls, and COBIT, plus vulnerability management, IAM, and incident response. Makati-based role with BCP/DRP considerations.

Qualifications

• Bachelor's degree in IT, CS, cybersecurity, or related field.
• 5–6 years of IT audit/IT operations/security experience.
• Familiar with ISO 27001, NIST, CIS Controls, COBIT.
• Experience in vulnerability management, IAM, incident response, and BCP/DRP.
• Certs like CISA, CISSP, CISM, Security+ or CRISC are advantageous.
• Willing to work in Makati.

Responsibilities

• Lead audits of IT infrastructure and cybersecurity controls to ensure confidentiality, integrity, and availability.
• Audit network security, servers, databases, cloud environments, and IAM.
• Assess IT security controls such as vulnerability management and patching.
• Review monitoring, incident response, and escalation processes for timely security events.
• Evaluate BCP/DRP arrangements to ensure operational resilience.
• Perform control testing, risk assessments, and security evaluations across IT environments.
• Identify security risks, gaps, issues, root causes, and remediation actions.
• Prepare audit reports and present findings to stakeholders.

Skills

IT audit

Cybersecurity controls

Vulnerability management

Identity & access management

Incident response

BCP/DRP

Audit reporting

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

ISO 27001

NIST

CIS Controls

COBIT

Job description

The position is primarily responsible for leading audits of IT infrastructure and cybersecurity environments to ensure the confidentiality, integrity, and availability of systems, networks, and data.

Duties and Responsibilities:

• Experienced in conducting audits of IT infrastructure and cybersecurity controls, including network security, servers, databases, cloud environments, and identity and access management.


• Skilled in assessing IT security controls such as vulnerability management, patching, and system configuration.


• Knowledgeable in reviewing cybersecurity monitoring, incident response, and escalation processes to ensure timely and effective handling of security events.


• Familiar with evaluating Business Continuity and Disaster Recovery (BCP/DRP) arrangements to ensure operational resilience.


• Proficient in performing control testing, risk assessments, and security evaluations across IT environments to determine control effectiveness.


• Able to identify security risks, control gaps, issues, and root causes, and recommend appropriate remediation actions.


• Capable of preparing clear and comprehensive audit reports and presenting findings to stakeholders in a structured and professional manner.

Qualifications:

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field.


• Has 5-6 years of experience in IT audit, IT operations, IT infrastructure, IT security, or cybersecurity.


• Knowledgeable in frameworks such as ISO 27001, NIST, CIS Controls, and COBIT.


• Experienced in vulnerability management, IAM, incident response, and BCP/DRP.


• Holding certifications such as CISA, CISSP, CISM, Security+, or CRISC is an advantage.


• Willing to work in Makati