Lead Auditor

Coforge; Muntinlupa; On-site; PHP 1,800,000 - 2,800,000; Full time

Job summary

Coforge is seeking a Lead Internal Auditor – ISMS & BCMS in Metro Manila with 7+ years of internal auditing experience across information security, business continuity, and risk management. Lead audit programs, guide teams, and ensure ISO 27001 & ISO 22301 compliance across functions.

You will develop audit plans, assess controls, and drive CAPA processes while collaborating with stakeholders to strengthen governance and compliance. This role demands leadership and deep audit expertise.

Qualifications

• Bachelor’s degree in Information Technology, Information Security, Risk Management, Engineering, Business Administration, or a related field.
• 7+ years of experience in Internal Audit, Compliance, Risk Management, Information Security, Governance, or Business Continuity.
• 3+ years leading audit programs, audit teams, or compliance engagements.

Responsibilities

• Lead and execute internal audits for ISO 27001 (ISMS) and ISO 22301 (BCMS).
• Develop risk-based internal audit programs and annual audit schedules.
• Evaluate compliance with ISO requirements, policies, regulatory obligations, and client controls.
• Assess effectiveness of information security, business continuity, governance, and risk practices.
• Review policies, records, and processes to validate compliance and control effectiveness.
• Identify non-conformities, control gaps, and opportunities for improvement.
• Prepare, review, and approve audit findings and reports.
• Conduct follow-up audits and validate CAPA effectiveness.
• Provide audit status reports and dashboards to leadership.
• Support external and client audits and certifications.

Skills

ISO 27001

ISO 22301

ISMS

BCMS

Internal Auditing

Risk Auditing

Governance

Compliance

Internal Controls

Root Cause

CAPA

Stakeholder Mgmt

Audit Reporting

Team Leadership

Education

Bachelor's degree in IT/InfoSec/Risk

Job description

Job Title: Lead Internal Auditor – ISMS & BCMS

Experience: 7+ Years in Internal Auditing, Information Security, Business Continuity, Compliance, and Risk Management, with at least 3 years in a Lead Auditor or audit leadership capacity

Skills: ISO 27001, ISO 22301, Information Security Management Systems (ISMS), Business Continuity Management Systems (BCMS), Internal Auditing, Risk-Based Auditing, Governance, Compliance Management, Internal Controls Assessment, Root Cause Analysis, Corrective Action Management, Stakeholder Management, Audit Reporting, Team Leadership

We at Coforge are hiring a Lead Internal Auditor – ISMS & BCMS with the following skillset:

Key Responsibilities

• Lead and execute internal audits for Information Security Management Systems (ISO 27001) and Business Continuity Management Systems (ISO 22301).
• Develop and maintain risk-based internal audit programs and annual audit schedules.
• Evaluate compliance with ISO requirements, organizational policies, regulatory obligations, and client-specific controls.
• Assess the effectiveness of information security controls, business continuity plans, governance frameworks, and risk management practices.
• Review policies, procedures, records, evidence, and operational processes to validate compliance and control effectiveness.
• Identify non-conformities, control gaps, compliance risks, observations, and opportunities for improvement.
• Prepare, review, and approve audit findings, reports, and supporting documentation.
• Conduct follow-up audits and validate the effectiveness of corrective and preventive actions (CAPA).
• Provide timely audit status reports, escalation updates, and compliance dashboards to leadership.
• Support external audits, surveillance audits, certification audits, and client reviews.
• Ensure audit readiness across business functions and maintain compliance with established audit methodologies.
• Partner with process owners and business stakeholders to strengthen governance, compliance, and risk controls.
• Drive continuous improvement initiatives across audit, risk, compliance, information security, and business continuity programs.
• Coach, mentor, and provide guidance to Senior Auditors and Auditors.
• Maintain confidentiality, objectivity, and independence throughout the audit lifecycle.
• Stay updated on ISO standards, industry regulations, audit methodologies, and emerging risks.
• Perform other duties and responsibilities as assigned.

Qualifications

• Bachelor's degree in Information Technology, Information Security, Risk Management, Engineering, Business Administration, or a related field.
• At least 7 years of experience in Internal Audit, Compliance, Risk Management, Information Security, Governance, or Business Continuity.
• Minimum of 3 years of experience leading audit programs, audit teams, or compliance engagements.
• Strong experience conducting audits against ISO 27001 (ISMS) and ISO 22301 (BCMS).
• Strong understanding of risk-based auditing principles, governance frameworks, compliance requirements, and internal controls.
• Experience managing audit observations, remediation activities, and corrective action plans.
• Excellent analytical, documentation, problem-solving, and reporting skills.
• Strong communication, presentation, and stakeholder management capabilities.
• Ability to influence stakeholders and drive compliance initiatives across multiple functions.
• Knowledge of Information Security, Risk Management, and Business Continuity best practices.
• Experience supporting certification audits and surveillance audits is highly preferred.

Preferred Certifications

• CISA (Certified Information Systems Auditor)
• CISSP (Certified Information Systems Security Professional)
• CIA (Certified Internal Auditor)
• CRMA (Certification in Risk Management Assurance)

Preferred Candidate Profile

We are looking for a highly analytical and detail-oriented audit professional with strong expertise in Information Security Management Systems (ISMS) and Business Continuity Management Systems (BCMS). The ideal candidate should be capable of leading end-to-end audit activities, identifying and mitigating organizational risks, strengthening governance and compliance practices, and building strong stakeholder relationships. The successful candidate must demonstrate leadership, sound judgment, and the ability to drive continuous improvement while ensuring audit readiness and compliance across the organization.