IT Audit Specialist (Onsite)

The IT Audit Specialist shall ensure that the internal controls are effective and aligned with organizational objectives, as well as regulatory and industry standards. This position assists in the preparation of the engagement plan, assist in the execution of the audit work program and participate in the discussion of audit results.

Duties and Responsibilities:

• Develop and execute plans and procedures based on risk assessments.
• Perform audits of IT systems, networks, security policies, and infrastructure.
• Evaluate and conclude upon the operating effectiveness of operating system/database security, user security, segregation of duties, interface security/error monitoring, systems change management, and IT risk posture of 3rd party service providers, among others.
• Evaluate system security, and operational efficiency of IT systems.
• Perform external vulnerability and internal infrastructure/application security assurance reviews.
• Document results of audit procedures in the form of audit working papers.
• Prepare and maintain audit reports, documenting findings, recommendations, and the status of corrective actions.
• Recommend improvements to enhance operations and mitigate vulnerabilities.
• Participates in discussion of audit results.
• Stay updated on the latest industry standards, regulations, and best practices to ensure the company remains complaint.

Education and Work Experience Requirements:

• BS Information Technology or BS Accountancy (or Finance-related Course) with experience in IT Audit
• Preferably with direct experience in IT (at least 6 months)
• Preferably with experience in ITGC (IT General Controls - change management controls, access security/security management or IT operations), and Application Controls
• Must have strong verbal and written English Communication skills with a structured manner off thinking/communication
• Must be willing to travel to subsidiaries for audit engagements.