QUALIFICATIONS: 

• Bachelor's degree in Accountancy, Information Systems, Information Technology, Computer Science, Computer Engineering, or a related field. 
• At least 3 years of experience in Internal Audit, IT Audit, IT Risk Management, IT Compliance, or IT Governance. 
• Strong knowledge of COBIT, ITIL, ISO 27001, IT governance, risk management, and information security principles. 
• Good understanding of IT General Controls (ITGCs), internal controls, audit methodologies (IIA and ISACA), and the Data Privacy Act of 2012. 
• Strong analytical, problem-solving, report writing, and presentation skills. 
• Professional certifications such as CISA, CRISC, or CGEIT are an advantage. 
• Proficient in Microsoft Office applications; experience with ERP systems and data analytics tools is preferred. 
• High level of integrity, professionalism, and confidentiality. 

SPECIFIC DUTIES AND RESPONSIBILITIES: 

1. Operational Functions 

• Plan and perform IT audits covering IT governance, cybersecurity, infrastructure, applications, ERP systems, and IT operations. 
• Review and evaluate IT policies, standards, and procedures to ensure adequacy, effectiveness, and compliance with Company policies and regulatory requirements. 
• Assess IT governance, risk management, and internal control processes using recognized frameworks such as COBIT, ITIL, and ISO 27001. 
• Evaluate IT general controls (ITGCs), including logical access, change management, system development, backup and recovery, and disaster recovery processes. 
• Identify control weaknesses, technology risks, and operational inefficiencies, and recommend practical corrective actions. 
• Monitor the implementation of audit recommendations and validate the effectiveness of corrective action plans. 

2. Administrative Functions 

• Prepare audit programs, risk assessments, working papers, and audit reports. 
• Maintain complete, accurate, and organized audit documentation. 
• Present audit findings and recommendations to Management and process owners. 
• Coordinate with the MIS Department and other business units during audit engagements. Assist in the preparation and execution of the annual IT Audit Plan. 

3. Compliance and Audit Functions 

• Evaluate compliance with applicable laws, regulations, and Company policies, including the Data Privacy Act of 2012 and information security requirements. 
• Ensure adherence to internal audit standards, IT governance frameworks, and regulatory requirements. 
• Safeguard the confidentiality and integrity of audit information and Company data.