IT Risk & Audit Consultant — Digital Security Controls

Ernst & Young Advisory Services Sdn Bhd; Taguig; On-site; PHP 500,000 - 750,000; Full time

Job summary

EY in Taguig, Philippines is seeking an IT Audit professional to join our Risk Consulting team. You will leverage your IT audit experience to assess design and implementation of controls, security and IT risk solutions, working with cross-functional teams to drive remediation and improve control effectiveness.

The role requires 2–3 years in IT risk and compliance, familiarity with IT control frameworks (COSO, COBIT, ISO, NIST), and exposure to ERP or cloud technologies.

Qualifications

• Bachelor’s or Master’s degree and approximately 2–3 years of related work experience.
• At least 1–2 years of experience in IT Risk and Compliance.
• Design IT Risk Controls framework such as IT SOX.
• Implementation and Testing of internal controls such as IT general controls, IT application controls, IPE related controls, interface controls etc.
• Identify control gaps, weaknesses and areas of improvements.
• Conducting IT internal control reviews, and review of SOC1 or SOC2 reports.
• Knowledge of IT risk, information security or cyber security frameworks such as COSO, COBIT, ISO, NIST etc.
• IT Compliance and regulatory assessments – IT Risk and Controls assessment with exposure of any of the technologies such as SAP, Oracle, Workday, MS Dynamics or emerging technologies such as Cloud, RPA, AI/ML.

Responsibilities

• Deliver quality IT audit results in assessment, design, and support implementation of controls, security and IT risk solutions.
• Collaborate with cross-functional teams including internal audits, IT security and business stakeholders to assess control effectiveness and remediation activities.
• Communicate and document findings clearly and professionally.

Skills

IT Audit

IT Risk

COSO

COBIT

ISO

NIST

SOC1/SOC2

Communication

Documentation

Education

Bachelor’s degree

Master’s degree

Tools

SAP

Oracle

Workday

MS Dynamics

Cloud

RPA

AI/ML

Job description

EY in Taguig, Philippines is seeking an IT Audit professional to join our Risk Consulting team. You will leverage your IT audit experience to assess design and implementation of controls, security and IT risk solutions, working with cross-functional teams to drive remediation and improve control effectiveness.

The role requires 2–3 years in IT risk and compliance, familiarity with IT control frameworks (COSO, COBIT, ISO, NIST), and exposure to ERP or cloud technologies.