SOC 2 Readiness Lead - IT Audit & Compliance

P&A Grant Thornton; Makati; On-site; PHP 1,000,000 - 1,700,000; Full time

Job summary

P&A Grant Thornton Philippines is seeking a Senior IT Auditor to lead SOC 2 Type II readiness for the BPS Division. You will coordinate with CSU, Operations, Technology, HR, and other process owners to assess controls, drive remediation, and ensure audit readiness.

You will serve as SME for SOC 2 controls (Security, Availability, Confidentiality, Processing Integrity, Privacy), design and implement test programs, review ITGCs, and deliver evidence, documentation, and executive updates to

Qualifications

• Minimum of five (5) years of relevant experience in SOC 2 audits, internal audit, IT audit, security compliance consulting, or information security assurance engagements.
• Proven experience leading SOC 2 Type II readiness assessments and/or SOC 2 audits.
• Preferred certifications: CISSP, CISM, CRISC.
• Strong knowledge of SOC 2 Trust Services Criteria (TSC) and related risk frameworks.

Responsibilities

• Lead the SOC 2 Type II readiness assessment for the BPS Division.
• Conduct gap assessments against the AICPA Trust Services Criteria (TSC).
• Review policies, procedures, controls, and system configurations for SOC 2 compliance.
• Develop detailed audit work programs, testing methodologies, and readiness procedures.
• Validate the implementation and operation of key controls across units.
• Review IT General Controls (ITGCs) including access, changes, incident management, backup/recovery, vendor management, and monitoring.
• Prepare documentation supporting audit observations and recommendations.

Skills

Leadership

Stakeholder management

Communication

Facilitation

Project management

Analytical thinking

Education

Bachelor's degree in Accounting, IS, CS, Information Security, Internal Audit

Tools

Ticketing systems

GRC tools

Audit tools

Workflow management systems

Job description

P&A Grant Thornton Philippines is seeking a Senior IT Auditor to lead SOC 2 Type II readiness for the BPS Division. You will coordinate with CSU, Operations, Technology, HR, and other process owners to assess controls, drive remediation, and ensure audit readiness.

You will serve as SME for SOC 2 controls (Security, Availability, Confidentiality, Processing Integrity, Privacy), design and implement test programs, review ITGCs, and deliver evidence, documentation, and executive updates to