Senior IT Auditor - Internal Audit, MariBank

MariBank Philippines, Inc.; Manila; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

MariBank Philippines, Inc. in Manila seeks an experienced IT Audit Lead to maintain the IT Audit Universe, assess risk, and plan the annual audit program.

You will lead IT audit engagements, supervise outsourcing, perform CAAT-based tests, and draft recommendations to strengthen governance, risk management, and controls. Candidates with a CISA and 6+ years in banking IT audits, preferably with Big 4 or internal audit background, are encouraged to apply.

Qualifications

• Graduated with Bachelor's in IT, accounting, banking & finance, or related field.
• Certified Information Systems Auditor (CISA) required.
• At least 6 years IT audit experience with people management.
• Experience in corporate/network infrastructure and security auditing.
• Big 4 or IT internal audit background in banking/financial sector preferred.
• Familiar with BSP rules, IT audit standards.

Responsibilities

• Maintain IT Audit Universe, perform risk assessment, and plan annual audits.
• Lead IT audit engagements, including outsourcing, to complete the plan.
• Prepare planning documents and risk-based IT audit scope.
• Facilitate kickoff/exits and communicate with IT/business units.
• Perform CAAT-based tests and data analysis to meet audit objectives.
• Draft audit reports with recommendations to improve governance and controls.
• Follow up on open audit observations and ensure remediation.
• Wrap up engagements with complete working papers and filing.
• Lead ad-hoc reviews like business continuity and disaster recovery testing.

Skills

IT audit

CISA

People management

Data analytics

CAATs

Communication skills

Education

Bachelor's degree in IT/Accounting/Banking & Finance

Tools

CAATs

Job description

Job Description

• Maintaining the IT Audit Universe, performing risk assessment, and preparing the annual audit plan.
• Lead the conduct of IT audit engagements, including outsourcing activities, ensuring completion of annual audit plan in a timely and efficient manner.
• Prepare audit planning documents, ensuring the implementation of a risk-based audit approach in the identification of IT audit scope and objectives.
• Facilitate the conduct of kick-off and exit meetings and other communication with IT and business units, ensuring effective exchange of information.
• Spearhead the performance of audit procedures, such as interview, system and process walkthrough, document review, test of controls, and data analysis using computer-assisted audit techniques (CAATs), ensuring thorough and effective achievement of audit objectives.
• Conclude the IT audit engagement including formulation of audit recommendations to improve governance, risk management, and control process, and drafting of audit report .
• Perform follow-up and reporting procedures on any open /unresolved audit observations, ensuring timely remediation and implementation of recommended internal control measures.
• Wrap up IT audit engagements by finalizing working papers and ensuring all documents are complete, accurate, and properly filed in accordance with the Internal Audit Manual and Bank's policies and procedures.
• Lead the performance of ad-hoc activities such as observation on business continuity and disaster recovery plan testing exercise, special investigation, and other request/directive from the Board or Management.

Job Description

• Maintaining the IT Audit Universe, performing risk assessment, and preparing the annual audit plan.
• Lead the conduct of IT audit engagements, including outsourcing activities, ensuring completion of annual audit plan in a timely and efficient manner.
• Prepare audit planning documents, ensuring the implementation of a risk-based audit approach in the identification of IT audit scope and objectives.
• Facilitate the conduct of kick-off and exit meetings and other communication with IT and business units, ensuring effective exchange of information.
• Spearhead the performance of audit procedures, such as interview, system and process walkthrough, document review, test of controls, and data analysis using computer-assisted audit techniques (CAATs), ensuring thorough and effective achievement of audit objectives.
• Conclude the IT audit engagement including formulation of audit recommendations to improve governance, risk management, and control process, and drafting of audit report .
• Perform follow-up and reporting procedures on any open /unresolved audit observations, ensuring timely remediation and implementation of recommended internal control measures.
• Wrap up IT audit engagements by finalizing working papers and ensuring all documents are complete, accurate, and properly filed in accordance with the Internal Audit Manual and Bank's policies and procedures.
• Lead the performance of ad-hoc activities such as observation on business continuity and disaster recovery plan testing exercise, special investigation, and other request/directive from the Board or Management.

Requirements

• Graduate of Bachelor's Degree in Information Technology, Accounting, Banking & Finance, Business Management or any related course
• Certified Information System Auditor (CISA)
• At least 6 years of IT audit experience with people management experience
• Preferably with experience in the audit of corporate and network infrastructure, database security, platform security, and mobile application security
• Preferably candidates that are /or were previously with a Big 4 audit firm, or were part of an IT internal audit team within the banking /financial industry
• Preferably completed the training in IT Audit Standards (i.e., ITAF, etc.), AML/CFT
• Experience in BSP Rules & Regulations, IT Audit Practices
• Experience in Data Analytics, Use of computer - assisted audit techniques & tools
• With good communication and interpersonal skills
• Adaptable, willing to learn and thrive in a fast-paced environment