Internal Auditor

The Internal Auditor is responsible for independently evaluating the adequacy and effectiveness of the company's internal controls, business processes, compliance, and risk management systems. Additionally, the role serves as the designated Data Protection Officer (DPO), ensuring compliance with the Data Privacy Act of 2012 and related regulations across all branches and departments. The position provides assurance and recommendations for process improvement and data protection.

Duties and Responsibilities

A. Internal Auditor Duties and Responsibilities:

1. Conduct Process Mapping and Documentation

a. Conduct interviews and walkthroughs with department personnel

b. Prepare written documentation of actual practices and coordinates with IT Department for the

preparation of process flowcharts

c. Identify deviations from company policy, control weaknesses, and operational bottlenecks

1. Evaluate Control Environments and Recommend Process Improvements

a. Assess the effectiveness, efficiency, and risk exposure of existing controls by analyzing

documented processes for risks, inefficiencies, and non-compliances

b. Recommend practical improvements to strengthen internal controls, streamline operations,

and reduce risk of fraud or loss

c. Present propose changes to management and standardization across departments and

branches for consistent operations

1. Plan and Execute Regular Operational and Compliance Audits

a. Design and establish the internal audit function, tools, and practices

b. Conduct regular financial, operational, and compliance audits

c. Perform branch audits in General Santos and other locations, as applicable

d. Ensure consistency and compliance with updated policies across branches

1. Conduct Inventory and Asset Spot Checks and Reconciliations

a. Facilitate scheduled and surprise audits of spare parts, tools, and assets in coordination with

the Accounting Department

b. Investigate and report any discrepancies or losses

1. Conduct Fraud Risk and Compliance Review

a. Monitor for potential fraud indicators or control weaknesses

b. Verify compliance with internal policies, BIR requirements, and other regulations

1. Report Audit Findings and Conducts Follow-Up Activities

a. Prepare audit reports with findings, risk ratings, and recommended actions

b. Track implementation of corrective actions and report progress to management

c. Maintain proper audit documentation for future reference and follow-up

1. Provide Support for External Audits and Regulatory Compliance

a. Assist with BIR, ISO, or external audits by providing necessary data and clarifications

b. Ensure dealership practices remain compliant with government and industry standards

B. Data Protection Officer (DPO) Duties and Responsibilities:

1. Ensure Regulatory Compliance

a. Monitor and ensure compliance with the Data Privacy Act of 2012, its Implementing Rules and

Regulations (IRR), and National Privacy Commission (NPC) guidelines.

b. Develop, implement, and maintain the company's Privacy Management Program.

c. Recommend and update company privacy policies, guidelines, procedures, protocols, and

consent forms.

1. Manage Privacy Risks and Implementing Data Protection Measures

a. Lead the conduct of Privacy Impact Assessments (PIAs) for processes involving personal data

b. Identify privacy risks in data processing systems and recommend appropriate mitigation

strategies

c. Ensure that effective security measures are in place for the storage, access, and disposal of

personal data

1. Safeguard the Rights of Data Subjects

a. Establish clear and accessible procedures that allow data subjects to exercise their rights such

as the right to access, correct, object, or withdraw consent to the processing of their personal

data

b. Respond to and manage data subject requests, inquiries, and complaints in accordance with

legal requirements

1. Manage Data Breach Incidents

a. Lead the investigation and report notifiable data breaches to the National Privacy Commission

(NPC) within required timelines.

b. Ensure the implementation of corrective actions to prevent recurrence.

1. Coordinate Privacy Efforts Within and Outside the Organization

a. Serve as the main contact for all privacy-related matters, both internally and with the NPC.

Coordinate with department heads to align business processes with data privacy requirements

1. Promote Training and Awareness

a. Responsible for planning and conducting regular privacy awareness campaigns and training

programs for employees and contractors

The Internal Auditor / DPO is expected to engage in continuing education and stay updated on audit standards

and industry regulations, and data privacy laws and best practices. He/She may also be assigned other related

tasks and responsibilities from time to time, as may be deemed necessary by management to support business

operations and compliance objectives.

Job Qualifications

Education :

 Bachelor's Degree in Accountancy or Internal Auditing

 Must be a Certified Public Accountant (CPA) or a Certified Internal Auditor

(CIA)

Work Experience :

 Minimum of one (1) year of relevant experience in internal audit,

compliance, or process evaluation

Required Skills :

 Strong background in process analysis and internal controls

 Knowledge in developing and implementing audit and compliance programs

 Good in presenting ideas and concepts orally and in writing

 Excellent analytical and problem-solving skills

 Proficient in Microsoft Office applications

Personality Traits :

 Analytical mindset with attention to detail

 High level of integrity and objectivity

 Organized and systematic in documenting workflows and findings

 Strong written and verbal communication skills

 Self-motivated and able to work independently while coordinating across

departments