IT Audit Associate Manager

***Note: This position is open to applicants based in the Philippines only.

DUTIES AND RESPONSIBILITIES

Provide services to AGO’s clients, whether assurance or advisory in nature that are designed for the purpose of strengthening internal controls and helping to improve IT and business performance. Client engagements may include IT SOX, IT Internal Audits, Service Organization Controls (SOC) related engagements. Internally, will assist in IT strategic internal initiatives that may cover IT operations, security, and compliance. It may include executing IT security and operational assessment using industry standards and frameworks, and data security and privacy regulations .

ESSENTIAL JOB FUNCTIONS

To perform this job successfully, an individual must be able to perform each essential function satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions

• Provide high quality client service, working directly with onshore and/or client teams to understand and evaluate client’s IT environment and controls.
• Manage and perform the efficient execution of controls testing related to Information Technology General Controls (ITGC), Application Controls, and IT security controls.
• Designs, prepares and/or review internal and client audit reports.
• Provides effective leadership to employees and/or teams through providing direction, training, communicating performance expectations and providing feedback and performance.
• Provide insight in maintaining risk, threat and controls inventory as aligned with globally accepted standards or frameworks.
• Execute IT infrastructure configuration reviews based on best practices and accepted benchmarks.
• Oversee the validation of risk assessments, process and technology control designs, control gap identification, test scripts and evidence and identification of compensating controls.
• Provide insight in implementing Information Security Standards and Guidelines (e.g., IT Policies and Procedures, Security Incident Plan, Response Playbook, Configuration Benchmarks) as aligned with best practices, regulatory, and client requirement.
• Provide support in rolling out IT Security Projects and IT Operational directives of the firm.

QUALIFICATIONS: MINIMUM EDUCATION/EXPERIENCE

• Relevant degree preferred, not required.
• At least 8 to 15 years of experience related to audits/reviews of IT General Controls across different platforms (Application, Operating System, Database) related to the following:
• User Access Management
• Backup and Recovery Management
• Batch Job Management
• Problem/ Incident Management
• System development/acquisition, migration, and implementation.
• IT Applications/Automated Controls related to business process such Procure to Pay, Order to Cash, Inventory, Payroll, Treasury, Record to Report, etc.
• System-Generated Report/ Information Produced by Entity (IPE) testing.
• With exposure leading any of engagements related to IT SOX, IT Internal Audit, Service Organization Controls (SOX), Information Security Review, and/or Cloud Security review/testing.
• Certifications like CISA, CISM, CRISC is a plus but not required.
• With reasonable experience and knowledge of IT General Controls, Cyber security, Security and Audit Frameworks (ISO27001, NIST 800-53), project management and IT risk management.
• With a qualitative trait of being accountable, proactive problem solving, and proven ability to adapt and learn in an innovative environment.
• Excellent project management, teamwork, and client service skills.
• Excellent presentation, written and oral communication skills.

TECHNICAL AND OTHER SKILLS

• Ability to effectively work and collaborate on a work from home environment.
• Intermediate knowledge of Microsoft Office – Required.
• Leads and manages client engagements, oversees audit execution, and provides overall direction.
• Working knowledge of IT Infrastructure technologies (Network, Server, Email), IT Security (EDR, Encryption, Network Security, Vulnerability and Patch Management).
• Ability to effectively present information and respond to questions that is understood by stakeholders- Required
• Strong time management and organizational skills – Required
• Attention to detail and accuracy – Required