Basic Information

Ref Number

Req_00020252

Last day to apply

30-6-2019

Primary Location

Ortigas Center

Country

Philippines

Description and Requirements

  • IT Services Risk Management, Audit & Compliance
  • The individual is responsible for managing and coordinating  Assurance Audits such as  SOC2, CSAE 3416, Section 5025,  PCI-DSS, Interac audits, as well as client compliance programs. Monitoring & Reporting of all remediation efforts that would .  In addition, the Audit & Compliance specialist is responsible to build, develop and implement audit and compliance programs and policies to safeguard data.
  • Manage and/or coordinate Assurance Audits such as  SOC2, CSAE 3416, Section 5025,  PCI-DSS, Interac audits, as well as client compliance programs.
  • Create and administer internal and external compliance/audit programs
  • Monitor the remediation of all control deficiencies
  • Responsible for assessing and understanding the risks and contribute in risk management initiatives. 
  • Responsible for the development and enforcement of Information Security policies.
  • Audit Management and coordination:
    • Set and manage audit schedule
    • Coordinate and manage auditors/ Staff meetings/etc
    • Gather/ review/validate audit evidence / supporting documentation
    • Present audit results to staff and if necessary to clients
  • Coordinate various client external audits
  • Audit analysis and assessment of internal control processes and procedures
  • Serve as liaison with Clients, auditors, staff and management for all audit matters
  • Perform annual vendor management assessments
  • Create and administer compliance / audit programs
    • Review existing business and IT processes and controls
    • Complete gap analysis and risk assessments
    • Identify existing and create new monitoring controls
    • Collect evidence and conduct audits as necessary
  • Participate in special projects as required
  • Monitor the remediation of all control deficiencies
  • Continuously improve the internal and external audit and compliance security posture of all audits in the Audit Program.
  • Provide business process internal control guidance to where warranted

Additional Job Description

The individual is responsible for managing and coordinating Assurance Audits such as SOC2, CSAE 3416, Section 5025, PCI-DSS, Interac audits, as well as client compliance programs. Monitoring & Reporting of all remediation efforts that would . In addition, the Audit & Compliance specialist is responsible to build, develop and implement audit and compliance programs and policies to safeguard data. Key Job Responsibilities • Manage and/or coordinate Assurance Audits such as SOC2, CSAE 3416, Section 5025, PCI-DSS, Interac audits, as well as client compliance programs. • Create and administer internal and external compliance/audit programs • Monitor the remediation of all control deficiencies • Responsible for assessing and understanding the risks and contribute in risk management initiatives. • Responsible for the development and enforcement of Information Security policies. Detailed Job Responsibilities • Audit Management and coordination: o Set and manage audit schedule o Coordinate and manage auditors/ Staff meetings/etc o Gather/ review/validate audit evidence / supporting documentation o Present audit results to staff and if necessary to clients • Coordinate various client external audits • Audit analysis and assessment of internal control processes and procedures • Serve as liaison with Clients, auditors, staff and management for all audit matters • Perform annual vendor management assessments Other Job Responsibilities if required • Create and administer compliance / audit programs o Review existing business and IT processes and controls o Complete gap analysis and risk assessments o Identify existing and create new monitoring controls o Collect evidence and conduct audits as necessary • Participate in special projects as required • Monitor the remediation of all control deficiencies • Continuously improve the internal and external audit and compliance security posture of all audits in the Audit Program. • Provide business process internal control guidance to where warranted Mandatory-Qualifications (Education, skills, knowledge and experience) • Education: o University Degree and relevant experience. o Nice to have Audit Designation (CISA, CRISC, CISM, PCIP, PCI-QSA, CA, CIA) • Knowledge: o Excellent Project Management, communication and organizational skills. Ability: Demonstrated ability to analyze problems, devise solutions, plan, organize, evaluate, implement and manage audit processes. o Must display tact and diplomacy, maturity, judgement and imagination. Experience: Minimum 2 years audit / internal control experience Nice to have -Qualifications (Education, skills, knowledge and experience) • Education: o Audit Designation (CISA, CRISC, CISM, PCIP, PCI-QSA, CA, CIA) • Knowledge: o Good understanding of COBIT, ISO27001, ITIL, and risk management frameworks. o Knowledge of generally accepted accounting practices and internal control techniques o Knowledge of information security technology, audit & control measures, monitoring/investigation methodologies and privacy/regulatory requirements.