IT Auditor (Cybersecurity)

Location: Makati (Full onsite)

Monday to Friday | Dayshift (8am-5pm)

Qualifications

• Bachelors degree in Information Technology or a related discipline
• At least 4 years of experience in the IT sector, with a minimum of 2 years in a role specifically involving Information Security or Cybersecurity.
• Completion of Lead Auditor training for ISO 27001 and ISO 9001 is an advantage
• Strong verbal and written communication skills; proficient in computer use

Job Description

Primary Responsibility:

• Carries out and finalizes third-party audit processes
• Facilitates designated training initiatives
• Supports promotional activities to introduce the divisions offerings to clients
• Guides and mentors auditors undergoing training or under supervision

Secondary Responsibility:

• Executes the complete audit process, serving either as a team member or leader, in line with KNOWLEDGE Global Procedures, ISO 17021-3 (QMS), ISO 17021-2 (EMS), ISO 19011, and internal company guidelines
• Reviews the clients quality management system through document analysis
• Develops audit plans and checklists for use during on-site assessments
• Performs audits on-site, adhering strictly to approved protocols
• Assembles and finalizes the audit documentation and reports
• Responds to client concerns or inquiries related to the auditing standards for which the auditor is qualified
• Modifies and adapts training materials as necessary, and delivers training sessions as assigned by the Division Manager
• Manages and strengthens client relationships within designated accounts
• Provides support to sales staff during client meetings or calls when applicable
• Delivers coaching and feedback to auditors being trained or supervised
• Undertakes additional duties in line with departmental goals or for personal and professional development, as guided by the direct supervisor
• Reports non-conformities or audit findings during the closing meeting, pending lead auditor review
• Finalizes audit documentation and maintains updated client records, such as kick sheets
• Ensures compliance with both company-wide and local policies, particularly those related to the Quality Management System
• Demonstrates a commitment to the highest ethical standards, in alignment with the SGS Code of Integrity