Internal IT Auditor – Information Security Focus

Jobtailor; Porto Alegre; Presencial; BRL 120 000 - 180 000; Tempo integral

Resumo da oferta

Jobtailor in Porto Alegre, Brazil, seeks an experienced Information Security and Cybersecurity auditor to plan and execute risk-based assessments. You will prepare reports highlighting weaknesses and recommendations, and collaborate across IT/IS teams to strengthen security controls.

The role emphasizes governance, regulatory compliance, and continuous improvement. Ideal candidates hold a bachelor’s in IT/IS, a postgraduate in auditing, and certifications in information security.

Qualificações

• Postgraduate degree in Auditing is a plus.
• Certifications in information security/cybersecurity are a plus.
• Experience with audit project management tools is a plus.
• Solid knowledge of ISMS (ISO/IEC 27001) and frameworks (NIST/CIS).

Responsabilidades

• Plan and execute independent risk- and control-based assessments on information security and cybersecurity.
• Prepare and present reports with audit results, weaknesses, and recommendations.
• Assess risk management, internal controls, and governance at Sicredi.
• Support evaluation of internal audit’s strategic drivers and priorities.
• Assess regulatory compliance and promote systemic risk management culture.
• Collaborate with IT/IS teams to improve security posture.

Conhecimentos

Information Security

Cybersecurity

Risk Assessment

Internal Audit

Data Analysis

Network Security

Secure SDLC

Operating Systems

Formação académica

Bachelor’s degree in Information Technology (IT) / Information Security (IS)

Postgraduate degree in Auditing

Certifications in Information Security/Cybersecurity

Ferramentas

SE Suite

TeamMate+ Audit

Descrição da oferta de emprego

Job Responsibilities

• Plan and execute independent, risk- and control-based assessments focusing on Information Security and Cybersecurity processes in accordance with internal methodology
• Prepare and present reports that reflect internal audit results, including identified weaknesses and recommendations arising during the audit process
• Perform independent assessments of risk management, internal controls and corporate governance processes established at Sicredi
• Support the evaluation of Internal Audit’s strategic drivers and priorities, acting as a facilitator to identify risks and risk factors that may materially affect the achievement of strategic objectives
• Assess the organization’s compliance with applicable official regulations
• Contribute to Sicredi’s sustainable development through preventive and educational actions
• Promote the development of a systemic risk management culture

Requirements

• Postgraduate degree in Auditing or Information Security/Cybersecurity is a plus
• Certifications in information security/cybersecurity are a plus
• Experience with Audit Project Management Tools (SE Suite, TeamMate+ Audit, etc.) is a plus
• Knowledge of Risk Management, Global Internal Audit Standards and their thematic requirements (IIA)
• Intermediate English
• Proven experience in auditing firms or consultancy and/or internal audit roles, with solid knowledge of Information Security and Cybersecurity
• Bachelor’s degree in Information Technology (IT), Information Security (IS) or related fields
• Knowledge of Information Security Management Systems (ISMS) such as ISO/IEC 27001, ISO/IEC 27002, and frameworks like NIST and CIS Controls
• Knowledge of risks and controls in Information Security processes
• Keep up to date on cyber threats and trends, adapting strategies as needed
• Knowledge of operating systems (Windows, Linux)
• Knowledge of network security, API and webservice environments, offensive and defensive security processes, and secure software development lifecycle
• Collaborate with other IT/IS teams to improve the company’s security posture
• Data-driven: ability to collect, analyze and interpret large volumes of data to identify trends and anomalies and assess potential risks, supporting audits with concrete evidence

Core Competencies

Demonstrates expertise in Information Security and Cybersecurity, with a strong focus on risk management, internal controls, and compliance with regulations. Proficient in utilizing audit project management tools and frameworks to enhance organizational security posture and support strategic objectives.

Highest-signal resume keywords

• Information Security Management Systems (ISMS)
• Risk Management
• Audit Project Management Tools
• Cybersecurity Frameworks (NIST, CIS Controls)
• Intermediate English

ATS Optimization Keywords

Hard Skills

• Information Security
• Cybersecurity
• Risk Assessment
• Internal Audit
• Data Analysis
• Network Security
• Secure Software Development Lifecycle
• Operating Systems (Windows, Linux)
• Compliance AssessmentAudit Reporting

Soft Skills

• Collaboration
• Facilitation
• Communication
• Problem-Solving
• Adaptability

Certifications & Qualifications

• Postgraduate Degree in Auditing
• Certifications in Information Security/Cybersecurity

Industry Keywords

• Global Internal Audit Standards
• ISO/IEC 27001
• ISO/IEC 27002
• Cyber Threats
• Sustainable Development

Tools & Technologies

• SE Suite
• TeamMate+ Audit