Senior Auditor (IT Audit)

Bank of Commerce (Philippines); Mandaluyong; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Bank of Commerce (Philippines) is seeking an experienced IT Auditor to lead a team in auditing information systems, platforms, and procedures per bank policies for efficiency, accuracy, and security.

The role involves planning and reporting audit engagements, evaluating IT risks, and recommending improvements in risk controls and system changes. Experience with data analysis tools like ACL is valued.

Qualifications

• Must have at least 5 years experience in internal/external auditing in banking.
• Must have at least 2 years in supervisory or in-charge capacity.
• Certification in Treasury or Trust Operations preferred.

Responsibilities

• Assists in planning, performance and reporting of audit engagements for IT systems and platforms.
• Evaluates IT infrastructure risks and recommends controls to mitigate loss.
• Performs and supervises IT general controls reviews (acquisition/development, data center operations, security, network, BCP/DRP).
• Develops CAATs and conducts data analysis on large data sets for audits.
• Documents processes and infrastructure to identify IT and business risks and root causes.

Job description

Leads a team of IT auditors responsible for auditing information systems, platforms, and operating procedures in accordance with established bank’s policies and procedures for efficiency, accuracy and security. Contributes in the planning, performance and reporting of audit engagements. Evaluates IT infrastructure in terms of risk to the organization and recommends controls to address risk and mitigate loss. Determines and recommends improvements in current risk management controls and on implementation of system development changes or upgrades. Performs detailed data analysis on large data sets using tools such as ACL (Audit Command Language).

JOB DESCRIPTION

• Assists in the over-all IT internal audit plan and make adjustments as necessary to ensure all goals are achieved.
• Assists in audits of diverse IT business units, including audit planning, audit execution, and communicating audit results to Audit Committee and/or Executive Management.
• Evaluate the adequacy of risk assessments of business processes and technology by analyzing business activities, potential risk exposures, and the materiality of loss.
• Performs and or supervises IT general controls reviews to determine if the bank has adequate standards in place for system acquisition/development, data center operations and security, database management and security, network administration, BCP/DRP and overall information security.
• Performs and/or supervise IS applications controls reviews to determine the effectiveness of controls over the bank’s application systems.
• Performs and/or supervises the conduct of pre and post-implementation reviews of various acquired or developed systems to determine if system’s objectives and requirements were achieved, cost-benefits were measured, changes requests were authorized and system’s control are effective based on the design.
• Recommends measures to improve or correct system deficiencies and other audit exceptions noted in the review.
• Assists other non-IS Auditors in performing risk-based IS audit involving bank’s applications and other related IS Audit and security controls.
• Documents business processes and related infrastructure to recognize risks to IT and business objectives and to identify root cause.
• Designs and executes appropriate tests to assess overall design and effectiveness of IT controls.
• Develops CAATs for use in financial, operations, compliance and other audit projects.
• Collaborates with IAD and ITSD departments to identify the most efficient means of harvesting data for analysis and reporting.
• Designs and evolves methods to integrate the use of DA and CAATs into audit engagements, audit universe, annual planning, continuous monitoring, and continuous auditing.
• Develops and communicates work paper documentation standards for the use of DA and CAATs.
• Performs other duties as may be assigned by the Department Head / CAE.

JOB QUALIFICATIONS

• Must have at least 5 years experience in internal/external auditing in banking
• Must have at least 2 years in supervisory or in-charge capacity
• Preferably must have certification in Treasury or Trust Operations