Senior IT Governance & Compliance Auditor

PJ Lhuillier Group of Companies; Makati; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

PJ Lhuillier Group of Companies in Makati seeks an IT Audit professional to lead audits focused on IT governance, regulatory compliance, and IT risk management. The role ensures alignment with COBIT, ITIL, ISO 27001 and BSP/Data Privacy Act requirements, strengthening the organization’s IT control environment.

Key duties include reviewing IT policies, assessing risk management processes, testing control activities, and preparing reports for management to support timely remediation actions.

Qualifications

• Bachelor’s degree in Accounting, Information Systems, IT or related field.
• 5–6 years of experience in internal IT audit, IT risk, compliance, or governance.
• Strong knowledge of IT governance frameworks (COBIT, ITIL) and regulations (BSP, Data Privacy Act).
• Good understanding of risk management, internal controls, and audit methodologies (IIA, ISACA).
• Possession of CISA, CRISC, or CGEIG is an advantage.
• Willing to work in Makati.

Responsibilities

• Lead IT governance, regulatory compliance, and IT risk audits.
• Review IT policies, standards, and procedures for adequacy.
• Assess IT risk management processes aligned with objectives.
• Evaluate compliance with regulatory requirements (BSP, Data Privacy Act).
• Test control activities and validate design/operating effectiveness.
• Prepare audit reports and present findings to management.

Skills

IT governance

Risk management

Regulatory compliance

Audit methodologies

Communication skills

Education

Bachelor’s degree in Accounting, Information Systems, IT or related field

CISA

CRISC

CGEIG

Job description

PJ Lhuillier Group of Companies in Makati seeks an IT Audit professional to lead audits focused on IT governance, regulatory compliance, and IT risk management. The role ensures alignment with COBIT, ITIL, ISO 27001 and BSP/Data Privacy Act requirements, strengthening the organization’s IT control environment.

Key duties include reviewing IT policies, assessing risk management processes, testing control activities, and preparing reports for management to support timely remediation actions.