Remote - IT AUDIT MANAGER

Anchored Global Office; Metro Manila; Remote; PHP 1,200,000 - 1,800,000; Full time

Job summary

Anchored Global Office is seeking an experienced IT Auditor to strengthen internal controls and improve IT and business performance for clients. You will perform ITGC, application controls, and security control testing while guiding teams and communicating findings with client teams.

Ideal candidates have 8–15 years of IT audit experience, exposure to IT SOX/SOC engagements, and knowledge of security frameworks such as ISO27001 and NIST.

Qualifications

• Relevant degree preferred, not required.
• 8 to 15 years of experience auditing IT General Controls across multiple platforms.
• Experience with IT SOX, IT Internal Audit, and SOC engagements is a plus.
• Familiarity with ISO27001, NIST 800-53, and cyber security frameworks.

Responsibilities

• Provide high quality client service, engaging with onshore/client teams to assess IT controls.
• Manage and perform ITGC, Application Controls, and IT security controls testing.
• Review and prepare internal and client audit reports.
• Lead audit engagements and provide direction and feedback to teams.

Skills

ITGC Testing

IT Security

Risk Management

Project Management

Client Service

Education

Relevant degree

Tools

Microsoft Office

Job description

DUTIES AND RESPONSIBILITIES

Provide services to AGO’s clients, whether assurance or advisory in nature that are designed for the purpose of strengthening internal controls and helping to improve IT and business performance. Client engagements may include IT SOX, IT Internal Audits, Service Organization Controls (SOC) related engagements.

Internally, will assist in IT strategic internal initiatives that may cover IT operations, security, and compliance. It may include executing IT security and operational assessment using industry standards and frameworks, and data security and privacy regulations.

ESSENTIAL JOB FUNCTIONS

To perform this job successfully, an individual must be able to perform each essential function satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

• Provide high quality client service, working directly with onshore and/or client teams to understand and evaluate client’s IT environment and controls.

• Manage and perform the efficient execution of controls testing related to Information Technology General Controls (ITGC), Application Controls, and IT security controls.

• Designs, prepares and/or review internal and client audit reports.

• Provides effective leadership to employees and/or teams through providing direction, training, communicating performance expectations and providing feedback and performance.

• Provide insight in maintaining risk, threat and controls inventory as aligned with globally accepted standards or frameworks.

• Execute IT infrastructure configuration reviews based on best practices and accepted benchmarks.

• Oversee the validation of risk assessments, process and technology control designs, control gap identification, test scripts and evidence and identification of compensating controls.

• Provide insight into implementing Information Security Standards and Guidelines (e.g., IT Policies and Procedures, Security Incident Plan, Response Playbook, Configuration Benchmarks) as aligned with best practices, regulatory, and client requirements.

• Provide support in rolling out IT Security Projects and IT Operational directives of the firm.

QUALIFICATIONS: MINIMUM
EDUCATION/EXPERIENCE

• Relevant degree preferred, not required.

• At least 8 to 15 years of experience related to audits/reviews of IT General Controls across different platforms (Application, Operating System, Database) related to the following:

  • User Access Management

  • Backup and Recovery Management

  • Batch Job Management

  • Problem/ Incident Management

  • System development/acquisition, migration, and implementation.

  • IT Applications/Automated Controls related to business process such Procure to Pay, Order to Cash, Inventory, Payroll, Treasury, Record to Report, etc.

  • System-Generated Report/ Information Produced by Entity (IPE) testing.

• With exposure leading any of engagements related to IT SOX, IT Internal Audit, Service Organization Controls (SOX), Information Security Review, and/or Cloud Security review/testing.

• Certifications like CISA, CISM, CRISC is a plus but not required.

• With reasonable experience and knowledge of IT General Controls, Cyber security, Security and Audit Frameworks (ISO27001, NIST 800-53), project management and IT risk management.

• With a qualitative trait of being accountable, proactive problem solving, and proven ability to adapt and learn in an innovative environment.

• Excellent project management, teamwork, and client service skills.

• Excellent presentation, written and oral communication skills.

TECHNICAL AND OTHER SKILLS:

• Ability to effectively work and collaborate on a work from home environment.

• Intermediate knowledge of Microsoft Office – Required.

• Leads and manages client engagements, oversees audit execution, and provides overall direction.

• Working knowledge of IT Infrastructure technologies (Network, Server, Email), IT Security (EDR, Encryption, Network Security, Vulnerability and Patch Management).

• Ability to effectively present information and respond to questions that is understood by stakeholders- Required

• Strong time management and organizational skills – Required

• Attention to detail and accuracy – Required

CORE COMPETENCIES

Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of this position. To perform the job successfully, an individual should demonstrate the following competencies:

• Project Management - Coordinates projects; Completes own projects on time and within budget.

• Customer Service - Responds to requests for service from clients and assistance from team members and partners; Meets commitments.

• Interpersonal Skills - Maintains confidentiality; Listens to others without interrupting; Keeps emotions under control.

• Oral Communication - Listen and gets clarification.

• Written Communication - Writes clearly and informatively; Edits work for spelling and grammar; Presents numerical data effectively; Able to read and interpret written information.

• Teamwork - Balances team and individual responsibilities; Exhibits objectivity and openness to others' views; Contributes to building a positive team spirit; Puts success of team above own interests; Supports everyone’s efforts to succeed.

• Safety and Security - Observes safety and security procedures; Reports potentially unsafe conditions; Uses equipment and materials properly.

• Professionalism - Approaches others in a tactful manner; Reacts well under pressure; Treats others with respect and consideration regardless of their status or position; Accepts responsibility for own actions. Follows through on commitments.

• Attendance/Punctuality - Is consistently at work and on time; Ensures work responsibilities are covered when absent; Available to work after normal business hours when required.