Information Systems Audit Manager

Company Description

Pilmico Foods Corporation is the integrated agribusiness and food company of Aboitiz Equity Ventures Inc. (AEV). Composed of four divisions: Flour, Feeds & Animal Health, Farms, and Trading, we are well positioned at the beginning of the value chain. True to our brand promise​ of being​ Partners for Growth, we nurture our business and communities by providing business solutions and building partnerships for growth.
We operate ​​in the Philippines nationwide ​and have a growing international presence in the following ASEAN countries: Vietnam, Thailand, Indonesia, Malaysia, Myanmar and Hong Kong.
Investing in talent and upholding Aboitiz ​values of Integrity, Teamwork, Innovation, and Responsibility are key drivers to sustaining the growth of our business.
Here at Pilmico, we value each talent for the unique contribution they bring to the organization. We recognize that today’s global workforce is made up of diverse individuals with different skills, abilities and aspirations that enable them to achieve superior results; as such, we select our partners based on these attributes that are not typically found in someone’s resume.
We are advocates of self-development and believe that people’s success lies in their passion to learn something new and different every day. This is why our hiring philosophy is to open up and give equal opportunity to any talent regardless of where they are today in pursuit of education.

Job Description

The INFORMATION SYSTEMS AUDIT MANAGER effectively directs, leads and manages the information systems and technology-related audits of the Food Group including its operations and/or governance; provides reasonable assurance on the effectiveness and efficiency of controls, governance and risk management processes of business units, subsidiaries and affiliates applying applicable industry standards; and partners with the various Strategic Business Units (SBU) in enhancing/improving current business performance and future competitiveness.

Key Responsibilities: 

Audit/Risk-Management/Compliance

• Audit Planning: Develop and execute a risk-based annual internal audit plan, considering key control areas, regulatory requirements, and industry best practices.
• IT Audit Engagement :Lead the delivery of complex technology, application, infrastructure, and security audits, project / program audits and integrated audits and assess compliance with company policies, procedures, relevant regulations, and industry standards. Typical audit topics are wide ranging and may include Cloud, AI, IT governance and cybersecurity amongst others.
• Risk Management: Perform detailed testing, documentation, and analysis of processes, transactions, and systems to identify control deficiencies, process gaps, and potential risks.
• Reporting and Communication: Prepare clear and concise audit reports, highlighting observations, recommendations, and management responses, for presentation to senior management and the Audit Committee.

Business Process Improvement

• Evaluate the adequacy of process design and the effectiveness of controls in meeting business and control objectives.

Business Partnering

• Collaborates with various stakeholders across the business to add value, enhance decision-making processes, and contribute to overall organizational success

Continuing Education & People Development

• Keep abreast of regulatory changes, industry standards, and emerging information technology risks relevant to the industry by attending trainings, forums and/or conferences and assess their impact on the company's internal controls and audit approach.

Administrative

• Take part in special investigations where necessary and report to the Audit Committee with the highest level of confidentiality

Qualifications

• A bachelor’s degree in computer science, information systems, accounting, finance, or other related fields is typically required.
• Seven (7) years IT-related experience, of which minimum 5 years IT audit experience and three (3) years of supervisory or project leadership experience
• Familiarity with auditing widely used server, platform, database and end point technologies (e.g. Windows server, SQL server, Unix/Linux, SAP, etc.)
• Advanced knowledge of the Standards (ISPPIA) and audit frameworks (COBIT, COSO).
• Well-versed in the use of MS Office (Excel, Word and Power Point Presentations) and familiar with Computer Aided Auditing Tools (CAATs), preferred but not required.
• Licenses/ Certifications:
  • Certified Information Systems Auditor (CISA)
  • Certified Information Security Manager (CISM)
  • Certified Risk and Information Systems Control (CRISC)
  • Certified Internal Auditor (CIA)
  • Certified Information Systems Security Professional (CISSP) or other equivalents.