Senior IT Audit & Risk Assurance Specialist

Dempsey Resource Management; San Juan; On-site; PHP 600,000 - 1,100,000; Full time

Job summary

Dempsey Resource Management is seeking an IT Audit professional to plan and perform IT audits across governance, cybersecurity, ERP systems, and IT operations in the Philippines. The role requires knowledge of COBIT, ITIL, ISO 27001, IT general controls, and data privacy compliance, with a focus on control adequacy, risk assessment, and reporting to management.

You will review policies, coordinate with departments, prepare audit programs, and monitor action plans.

Qualifications

• Bachelor's degree in Accountancy, Information Systems, Information Technology, Computer Science, Computer Engineering, or a related field.
• Strong knowledge of COBIT, ITIL, ISO 27001, IT governance, risk management, and information security principles.
• Good understanding of IT General Controls (ITGCs), internal controls, audit methodologies (IIA and ISACA), and the Data Privacy Act of 2012.
• Professional certifications such as CISA, CRISC, or CGEIT are an advantage.

Responsibilities

• Plan and perform IT audits covering IT governance, cybersecurity, infrastructure, applications, ERP systems, and IT operations.
• Review and evaluate IT policies, standards, and procedures to ensure adequacy, effectiveness, and compliance with Company policies and regulatory requirements.
• Assess IT governance, risk management, and internal control processes using recognized frameworks such as COBIT, ITIL, and ISO 27001.
• Evaluate IT general controls (ITGCs), including logical access, change management, system development, backup and recovery, and disaster recovery processes.
• Identify control weaknesses, technology risks, and operational inefficiencies, and recommend practical corrective actions.
• Monitor the implementation of audit recommendations and validate the effectiveness of corrective action plans.
• Prepare audit programs, risk assessments, working papers, and audit reports. Maintain complete, accurate, and organized audit documentation.
• Present audit findings and recommendations to Management and process owners.
• Coordinate with the MIS Department and other business units during audit engagements. Assist in the preparation and execution of the annual IT Audit Plan.
• Evaluate compliance with applicable laws, regulations, and Company policies, including the Data Privacy Act of 2012 and information security requirements.
• Ensure adherence to internal audit standards, IT governance frameworks, and regulatory requirements.
• Safeguard the confidentiality and integrity of audit information and Company data.
• Report significant control deficiencies, compliance issues, and technology risks to the Internal Audit Manager.
• Assist in external audits, regulatory reviews, and special investigations involving information systems.
• Participate in process improvement initiatives and IT risk management activities.
• Attend training programs related to IT audit, cybersecurity, governance, and compliance. Perform other duties and responsibilities that may be assigned by the Internal Audit Manager or Management.

Skills

IT Audit

IT Governance

COBIT

ITIL

ISO 27001

Data Privacy

ITGCs

Internal Controls

Audit Methodologies

CISA

CRISC

CGEIT

Education

Bachelor's degree in Accountancy/IT/Computer Science or related field

Tools

Microsoft Office

ERP systems

Data analytics tools

Job description

Dempsey Resource Management is seeking an IT Audit professional to plan and perform IT audits across governance, cybersecurity, ERP systems, and IT operations in the Philippines. The role requires knowledge of COBIT, ITIL, ISO 27001, IT general controls, and data privacy compliance, with a focus on control adequacy, risk assessment, and reporting to management.

You will review policies, coordinate with departments, prepare audit programs, and monitor action plans.