Lead Auditor - Risk Management ISMS / BCMS

COFORGE BPS PHILIPPINES, INC.; Muntinlupa; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Coforge is hiring a Lead Internal Auditor – ISMS & BCMS in Alabang, Philippines. You will spearhead end-to-end audits for ISO 27001 ISMS and ISO 22301 BCMS, develop risk-based programs, and drive improvement across governance and controls.

Strong leadership and stakeholder engagement are essential to deliver audit readiness and regulatory compliance. The role demands 7+ years in internal audit, information security, risk management, and 3+ years in audit leadership, with certifications in ISO

Qualifications

• Bachelor's degree in IT, Information Security, Risk Management, Engineering, or related field.
• 7+ years in Internal Audit, Compliance, Risk Management, Information Security, Governance, or Business Continuity.
• 3+ years leading audit programs, teams, or compliance engagements.
• Strong experience auditing ISO 27001 (ISMS) and ISO 22301 (BCMS).
• Solid understanding of risk-based auditing, governance, compliance, and internal controls.
• Experience managing audit observations, remediation activities, and CAPA.
• Excellent analytical, documentation, problem-solving, and reporting skills.
• Strong communication, stakeholder management, and ability to influence across functions.
• Knowledge of ISMS, risk management, and BCMS best practices; external audit support is preferred.

Responsibilities

• Lead and execute internal audits for ISO 27001 ISMS and ISO 22301 BCMS.
• Develop and maintain risk-based internal audit programs and annual schedules.
• Evaluate compliance with ISO requirements, policies, regulatory obligations, and client controls.
• Assess effectiveness of information security controls, BCMS, governance, and risk practices.
• Review policies, records, evidence, and processes to validate compliance and control effectiveness.
• Identify non-conformities, control gaps, risks, observations, and improvement opportunities.
• Prepare, review, and approve audit findings, reports, and documentation.
• Conduct follow-up audits and validate CAPA effectiveness.
• Provide audit status reports, escalations, and dashboards to leadership.
• Support external certification and surveillance audits and client reviews.
• Ensure audit readiness across functions and maintain audit methodologies.

Skills

ISO 27001

ISO 22301

ISMS

BCMS

Internal Auditing

Risk-Based Auditing

Governance

Compliance Management

Audit Reporting

Team Leadership

Education

Bachelor's degree in IT/IS or related field

Job description

Job Title: Lead Internal Auditor – ISMS & BCMS

Experience: 7+ Years in Internal Auditing, Information Security, Business Continuity, Compliance, and Risk Management, with at least 3 years in a Lead Auditor or audit leadership capacity

Skills: ISO 27001, ISO 22301, Information Security Management Systems (ISMS), Business Continuity Management Systems (BCMS), Internal Auditing, Risk-Based Auditing, Governance, Compliance Management, Internal Controls Assessment, Root Cause Analysis, Corrective Action Management, Stakeholder Management, Audit Reporting, Team Leadership

Location: Alabang, Philippines

We at Coforge are hiring a Lead Internal Auditor – ISMS & BCMS with the following skillset:

Key Responsibilities

• Lead and execute internal audits for Information Security Management Systems (ISO 27001) and Business Continuity Management Systems (ISO 22301).

• Develop and maintain risk-based internal audit programs and annual audit schedules.

• Evaluate compliance with ISO requirements, organizational policies, regulatory obligations, and client-specific controls.

• Assess the effectiveness of information security controls, business continuity plans, governance frameworks, and risk management practices.

• Review policies, procedures, records, evidence, and operational processes to validate compliance and control effectiveness.

• Identify non-conformities, control gaps, compliance risks, observations, and opportunities for improvement.

• Prepare, review, and approve audit findings, reports, and supporting documentation.

• Conduct follow-up audits and validate the effectiveness of corrective and preventive actions (CAPA).

• Provide timely audit status reports, escalation updates, and compliance dashboards to leadership.

• Support external audits, surveillance audits, certification audits, and client reviews.

• Ensure audit readiness across business functions and maintain compliance with established audit methodologies.

• Partner with process owners and business stakeholders to strengthen governance, compliance, and risk controls.

• Drive continuous improvement initiatives across audit, risk, compliance, information security, and business continuity programs.

• Coach, mentor, and provide guidance to Senior Auditors and Auditors.

• Maintain confidentiality, objectivity, and independence throughout the audit lifecycle.

• Stay updated on ISO standards, industry regulations, audit methodologies, and emerging risks.

• Perform other duties and responsibilities as assigned.

Qualifications

• Bachelor's degree in Information Technology, Information Security, Risk Management, Engineering, Business Administration, or a related field.

• At least 7 years of experience in Internal Audit, Compliance, Risk Management, Information Security, Governance, or Business Continuity.

• Minimum of 3 years of experience leading audit programs, audit teams, or compliance engagements.

• Strong experience conducting audits against ISO 27001 (ISMS) and ISO 22301 (BCMS).

• Strong understanding of risk-based auditing principles, governance frameworks, compliance requirements, and internal controls.

• Experience managing audit observations, remediation activities, and corrective action plans.

• Excellent analytical, documentation, problem-solving, and reporting skills.

• Strong communication, presentation, and stakeholder management capabilities.

• Ability to influence stakeholders and drive compliance initiatives across multiple functions.

• Knowledge of Information Security, Risk Management, and Business Continuity best practices.

• Experience supporting certification audits and surveillance audits is highly preferred.

Mandatory Certifications

• ISO 27001 Lead Auditor Certification

• ISO 22301 Lead Auditor Certification

Preferred Certifications

• CISA (Certified Information Systems Auditor)

• CISSP (Certified Information Systems Security Professional)

• CIA (Certified Internal Auditor)

• CRMA (Certification in Risk Management Assurance)

• ISO 31000 Risk Management Certification

• ISO 9001 Lead Auditor Certification

Preferred Candidate Profile

We are looking for a highly analytical and detail-oriented audit professional with strong expertise in Information Security Management Systems (ISMS) and Business Continuity Management Systems (BCMS). The ideal candidate should be capable of leading end-to-end audit activities, identifying and mitigating organizational risks, strengthening governance and compliance practices, and building strong stakeholder relationships. The successful candidate must demonstrate leadership, sound judgment, and the ability to drive continuous improvement while ensuring audit readiness and compliance across the organization.