Hybrid IT Audit & Security Governance Lead

Baker McKenzie; Buenos Aires; Hybrid; ARS 106,112,000 - 166,748,000; Full time

Job summary

Baker McKenzie seeks an Information Security Governance, Risk and Assurance Analyst to partner with Technology, Information Security, Risk and Procurement to support governance, risk, compliance and assurance objectives. You will conduct risk-based IT audits, security assessments and third-party risk reviews, strengthening supplier assurance and onboarding governance as part of the global security program.

This role reports to Associate Director, Information Security, within the Centre Services

Qualifications

• Experience in IT audit, information security assurance, third-party risk management.
• Ability to produce clear audit workpapers and reports.
• Knowledge of ISO 27001, NIST frameworks and related controls.

Responsibilities

• Plan and perform risk-based IT and information security audits, control assessments, and compliance reviews.
• Assess design and operating effectiveness of controls across governance, access management, change management, IT operations, cloud and network security.
• Coordinate evidence collection, documentation of findings, root causes, risk implications and recommendations.
• Support audits, client security assessments, regulatory reviews, and assurance requests with timely responses.
• Manage third-party risk lifecycle including due diligence, onboarding, monitoring and offboarding.

Skills

Information security

GRC

Audit and control

Third-party risk management

English proficiency

Analytical thinking

Stakeholder management

Education

Bachelor's degree in Computer Science/Information Security/Audit or related field

Equivalent experience

Tools

SecurityScorecard

Job description

Baker McKenzie seeks an Information Security Governance, Risk and Assurance Analyst to partner with Technology, Information Security, Risk and Procurement to support governance, risk, compliance and assurance objectives. You will conduct risk-based IT audits, security assessments and third-party risk reviews, strengthening supplier assurance and onboarding governance as part of the global security program.

This role reports to Associate Director, Information Security, within the Centre Services