Internal Auditor, Specialist – IT Focus

Jobtailor; São Paulo; Presencial; BRL 180 000 - 280 000; Tempo integral

Resumo da oferta

Jobtailor is seeking an IT Audit professional to assess governance, risk, and compliance, with emphasis on LGPD, ITGC, and cloud controls within financial services environments.

The role conducts control reviews, prepares reports, communicates findings, and coordinates corrective actions across IT and business units. Strong knowledge of security controls, incident response, and vendor risk is valued; certifications such as CISA/CRISC are preferred.

Qualificações

• Bachelor's degree in Information Systems, Computer Science, Computer Engineering, Information Security or related field.
• Certifications such as CISA, CRISC, COBIT Foundation, ISO 27001 Lead Auditor, ITIL Foundation, or CompTIA Security+ are strong differentiators.
• Knowledge of networks: architecture, protocols, logs, and monitoring.
• Knowledge of information security: access management, vulnerability management, encryption.
• Basic knowledge of database languages.
• Knowledge of cloud storage and services (AWS, Azure).
• Previous IT and audit experience.
• Knowledge of industry frameworks.
• Experience auditing complex environments, especially in financial services.

Responsabilidades

• Assess IT governance and risks, verifying adherence to policies, internal standards, and regulatory requirements.
• Audit IT general controls (ITGC): access management, change management, operations, backups, incidents, and environment integrity.
• Analyze information security and cybersecurity controls: incident protection, prevention, detection, and response.
• Verify LGPD compliance and privacy controls.
• Assess data and application integrity, including automated controls, integrations, and critical reports.
• Audit systems development and DevSecOps processes: requirements, testing, version control, and application security.
• Assess cloud and vendor risks: SLAs, security, continuity, and outsourced service contracts.
• Review business continuity and disaster recovery plans; verify resilience and contingency testing.
• Prepare audit reports, communicate findings, recommend improvements, and monitor action plan implementation.

Conhecimentos

IT Governance Assessment

Information Security Knowledge

Cloud Services (AWS, Azure)

Audit Experience in Financial Services

Data Integrity Assessment

Formação académica

Bachelor’s degree in Information Systems or related field

Ferramentas

Cloud Storage

Monitoring Tools

Audit Software

Descrição da oferta de emprego

• Assess IT governance and risks, verifying adherence to policies, internal standards, and regulatory requirements
• Audit IT general controls (ITGC), including access management, change management, operations, backups, incidents, and environment integrity
• Analyze information security and cybersecurity controls, assessing incident protection, prevention, detection, and response
• Verify compliance with Brazil’s General Data Protection Law (LGPD) and privacy controls
• Assess the integrity, quality, and reliability of data and applications, including automated controls, integrations, and critical reports
• Audit systems development and DevSecOps processes, reviewing requirements, testing, version control, and application security
• Assess cloud and technology vendor risks, analyzing SLAs, security, continuity, and outsourced service contracts
• Review business continuity and disaster recovery plans, verifying environment resilience and the effectiveness of contingency testing
• Prepare audit reports, communicate findings, recommend improvements, and monitor the implementation of action plans

Requirements

• Bachelor’s degree in Information Systems, Computer Science, Computer Engineering, Information Security, Business Administration with an IT focus, or a related field
• Certifications are a strong differentiator: CISA, CRISC, COBIT Foundation, ISO 27001 Lead Auditor, ITIL Foundation, or CompTIA Security+
• Knowledge of networks, including architecture, protocols, logs, and monitoring
• Knowledge of information security, including access management, vulnerability management, and encryption
• Basic knowledge of database languages
• Knowledge of cloud storage and services, including AWS and Azure
• Previous experience in IT and audit functions
• Knowledge of industry frameworks
• Experience auditing complex environments, especially in the financial services sector

Core Competencies

Demonstrates expertise in IT governance, risk assessment, and compliance with regulatory requirements, particularly Brazil's LGPD. Proficient in auditing IT general controls, information security measures, and cloud services, with a strong focus on data integrity and application security.

Highest-signal resume keywords

• IT Governance Assessment
• CISA Certification
• Information Security Knowledge
• Cloud Services (AWS, Azure)
• Audit Experience in Financial Services

Hard Skills

• IT General Controls (ITGC)
• Incident Response
• Vulnerability Management
• Database Languages
• DevSecOps Processes
• Access Management
• Change Management
• Business Continuity Planning
• Disaster Recovery
• Data Integrity Assessment

Soft Skills

• Communication Skills
• Analytical Thinking
• Problem-Solving

Certifications & Qualifications

• CISA
• CRISC
• COBIT Foundation
• ISO 27001 Lead Auditor
• ITIL Foundation
• CompTIA Security+

Industry Keywords

• Regulatory Compliance
• Brazil's General Data Protection Law (LGPD)
• Financial Services Sector
• Industry Frameworks

Tools & Technologies

• Cloud Storage
• Monitoring Tools
• Audit Software