Senior IT Lead Auditor - SOX & Security Controls

PM Consulting; Philippines; On-site; PHP 1,400,000 - 2,100,000; Full time

Benefits offered by this job

Worked with Big-4 firm

CISA or CISSP certifications

Global exposure

Job summary

PM Consulting is seeking a seasoned IT Lead Auditor to join our client's established shared service team in the Philippines. You will own the IT control framework, ensure SOX alignment with internal policies, and proactively manage security risks.

Required: at least 8 years in IT security or audit, hands-on SAP ECC/GRC/HANA, and strong knowledge of NIST/ISO risk management; extensive SOX experience is essential. Big-4 exposure and CISA/CISSP certifications are a plus.

Qualifications

• At least 8 years of experience in IT security or audit.
• Hands-on expertise with SAP ECC, GRC, or HANA, and a solid understanding of risk management standards like NIST or ISO.
• Extensive experience in SOX Framework.

Responsibilities

• Ensure the IT systems landscape complies with internal control frameworks, SOX requirements, and other regulatory and security standards.
• Embed risk, compliance, and information security controls into system integrations, transformation initiatives, and IT strategic planning.
• Identify control gaps and drive continuous improvement of governance processes and control effectiveness.
• Partner with IT and business stakeholders to align priorities with key objectives while balancing risk, speed, agility, and performance.
• Build strong cross-functional relationships to support risk-aware decision-making and effective service delivery.

Skills

IT security

Tools

SAP ECC

SAP GRC

SAP HANA

Job description

PM Consulting is seeking a seasoned IT Lead Auditor to join our client's established shared service team in the Philippines. You will own the IT control framework, ensure SOX alignment with internal policies, and proactively manage security risks.

Required: at least 8 years in IT security or audit, hands-on SAP ECC/GRC/HANA, and strong knowledge of NIST/ISO risk management; extensive SOX experience is essential. Big-4 exposure and CISA/CISSP certifications are a plus.