IT Audit Officer

About the role

The IT Audit Officer is responsible for executing the approved Annual Audit Plan to assess and improve IT risk management, control, and governance within the organization. This role supports senior management in achieving corporate objectives by providing independent audit insights.

Key responsibilities

• Conduct audit reviews according to the Annual Audit Plan and meet all deadlines set by the Audit Committee of the Board.
• Analyze operational risks and evaluate the design and operating effectiveness of IT controls.
• Prepare and present audit findings and reports within the stipulated time frame.
• Review prior internal and external audit reports and identify follow‑up actions.
• Develop and update audit programs after each assignment.
• Perform data analytics to generate actionable audit insights.

Required profile

• Graduate in Accountancy, Internal Auditing, Business, IT or related field.
• At least four (4) years of IT audit experience in banking, including two (2) years in a supervisory or team‑lead role.
• Experience with IT General Controls, IT Application Controls, and technical reviews such as cybersecurity, cloud computing, virtualization, and mobile computing.
• Familiarity with common operating systems, databases, networks, and cyber/IT security tools.
• Knowledge of the COBIT framework and relevant regulatory guidelines (e.g., BSP).
• Professional certifications such as CISA, CIA, or cybersecurity credentials are preferred.

Required skills

• IT General Controls
• IT Application Controls
• Cybersecurity
• Cloud computing
• Virtualization
• Mobile computing
• Operating systems, databases, network fundamentals
• COBIT framework
• Microsoft Office and M365
• Computer‑Assisted Audit Tools (CAATs)