IT Audit Manager

Location: Makati / BGC

Work Setup: Hybrid / Onsite

Work Schedule: Monday to Friday

The IT Audit Manager leads multiple engagement teams and manages a diverse portfolio of clients, delivering IT audit and risk advisory services. The role focuses on IT control/SOX compliance, information security, and data security, while also driving business development for strategic and global accounts.

• Lead business development initiatives across a diverse client portfolio
• Manage end-to-end IT audit and risk management engagements
• Supervise and lead the IT audit team in delivering high-quality outputs
• Gain a deep understanding of client business processes and document them through flowcharts and process narratives
• Develop risk-based audit plans, including audit approach, test procedures, and sampling methods
• Ensure audits are executed efficiently and in accordance with firm quality standards
• Review audit reports and provide clear, accurate insights on processes, controls, and portfolio conditions
• Ensure completion of audit work aligned with engagement objectives and reporting requirements
• Handle ad hoc tasks and other responsibilities as assigned by the Advisory Partner

• Drive business development efforts across assigned client portfolios
• Build and maintain strong relationships with clients, including C-level executives and key stakeholders
• Understand client challenges and recommend appropriate risk and IT audit solutions
• Provide regular feedback and coaching to team members on performance and development areas
• Keep clients informed of key developments in accounting standards, IT controls, risk management, cybersecurity, and related areas
• Provide timely advisory support to clients on professional and technical matters

• Mentor and coach team members to enhance performance and client delivery
• Provide structured feedback and performance evaluations (PRRs)
• Participate in annual performance review and talent development discussions

• Bachelor's degree in Accounting, Finance, IT, or a related field
• Must be a Certified Information Systems Auditor (CISA)
• At least 5 years of experience in internal audit, preferably with focus on process and systems audit
• Strong understanding of internal audit methodologies, risk assessment, control frameworks, and compliance standards
• Experience auditing IT systems, networks, databases, applications, and cybersecurity areas
• Skilled in evaluating internal controls, identifying gaps, and recommending improvements
• Experience in Network and Vulnerability Assessment and Penetration Testing (VAPT)
• Strong project management and organizational skills
• High integrity and strong professional ethics

• Certifications such as CIA, CISSP, or CPA
• Experience in application security and ERP implementation projects