IT Systems Implementation Auditor

Lever, Inc.; Brasil; Teletrabalho; BRL 120 000 - 180 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Fully remote (Brazil)

Professional development

Certifications support

Learning programs with major providers

Resumo da oferta

Lever, Inc. in Brazil is seeking an IT Systems Implementation Auditor to evaluate security, governance, and risk controls around major technology transformations.

This remote role focuses on SPIRs, ERP, cloud migrations, SaaS deployments, AI initiatives, and system integrations. You will lead IT audit teams, document findings, and communicate risks to technical and non-technical stakeholders in English and Portuguese.

Qualificações

• At least 5 years of professional IT experience; 7+ preferred.
• Experience in large-scale technology implementations (ERP, cloud migrations, SaaS, AI).
• Knowledge of cybersecurity, IT risk, governance, and assurance functions.
• Strong knowledge of COBIT, ISO 27001/27002, NIST, and COSO.
• Ability to communicate in English and Portuguese to diverse audiences.
• Bachelor's or master's degree in a related field preferred.
• One or more relevant certifications (CISA, CISSP, CISM, CRISC, CIA, CDPSE, ITIL, cloud certifications, SAP certs).

Responsabilidades

• Execute risk-based audits and SPIRs by defining objectives and testing controls.
• Lead audit reviews of ERP, cloud migrations, SaaS deployments, and large-scale programs.
• Assess governance, architecture, security, data migration, testing, and go-live risks.
• Review IT controls across change, incident, access, patching, APIs, inventory, and app controls.
• Evaluate cybersecurity and risk practices including SDLC, third-party risk, disaster recovery, and audit logging.
• Communicate findings clearly and prepare final reports.
• Lead IT audit teams and ensure delivery standards throughout engagements.
• Apply COBIT, ISO 27000, NIST, COSO, IPPF, ITIL frameworks.

Conhecimentos

IT Audit

System Implementations

Cloud Technologies

Security Controls

Stakeholder Management

Bilingual English/Portuguese

Formação académica

Bachelor's or Master's in Information Security/Information Systems/Computer Science

Ferramentas

COBIT

ISO 27001/27002

NIST

COSO

IPPF

ITIL

Descrição da oferta de emprego

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a IT Systems Implementation Auditor based in Brazil.

This is a remote technology assurance role focused on evaluating the security, governance, and risk controls surrounding major systems implementations.
You will conduct risk-based audits and System Pre-Implementation Reviews (SPIRs) to help ensure transformation initiatives are secure, controlled, and ready for successful deployment.
The role spans enterprise technology programs including ERP implementations, cloud migrations, SaaS deployments, system integrations, and AI initiatives.
You will assess project governance, solution design, data migration, testing, segregation of duties, operational readiness, and go-live risks.
The position combines technical cybersecurity knowledge with strong auditing, analytical, and stakeholder-management capabilities.
You will lead teams of IT auditors while communicating complex risks and recommendations to both technical and non-technical audiences.
This opportunity is well suited to an experienced IT audit or technology risk professional who wants to influence large-scale technology transformations and strengthen enterprise controls.

Accountabilities:

• Execute risk-based audits and System Pre-Implementation Reviews (SPIRs) by defining objectives, evaluating processes and associated risks, designing and performing control testing, assessing control effectiveness, and documenting conclusions for identified risks.
• Lead audit reviews of major technology transformation initiatives, including Enterprise Resource Planning (ERP) implementations, cloud migrations, Software as a Service (SaaS) deployments, system integrations, AI solutions, and other large-scale enterprise programs.
• Assess project governance, solution architecture and design, security controls, data migration processes, system testing, segregation of duties, operational readiness, and risks associated with technology go-live activities.
• Review IT controls, processes, and security configurations across areas such as change management, incident management, access management, patching, APIs, inventory, vulnerability management, operations, databases, authentication, authorization, data integrity, and application controls.
• Evaluate cybersecurity and technology risk practices, including secure software development, security governance, cloud computing, SDLC, third-party risk, penetration testing, vulnerability management, disaster recovery, audit logging, physical security, and configuration management.
• Communicate audit findings, issues, risks, technical information, and potential business impacts clearly and professionally, while developing practical recommendations and preparing final reports.
• Lead teams of IT auditors during assigned SPIR and audit engagements, coordinating activities and maintaining strong delivery standards throughout the review lifecycle.
• Apply recognized audit, security, internal control, and risk frameworks such as COBIT, ISO 27000, NIST, COSO, IPPF, and ITIL to support consistent and effective assurance activities.

Requirements

• Bring at least 5 years of professional experience in Information Technology, IT Audit, Technology Risk, System Implementations, IT Operations, Application Development, Cloud Technologies, or a related technical field; 7+ years is preferred.
• Have experience participating in or assessing large-scale technology implementations, ERP transformations, cloud migrations, SaaS deployments, system integrations, AI initiatives, or other enterprise transformation programs.
• Demonstrate professional experience in cybersecurity, SOX, risk management, IT auditing, compliance, or related technology governance and assurance functions.
• Possess strong knowledge of cybersecurity laws, regulations, standards, and general security practices, with familiarity with COBIT, ISO 27001/27002, NIST, and COSO.
• Demonstrate a strong understanding of cybersecurity and IT control processes, including incident response, secure software development, security governance, cloud computing, SDLC, third-party risk management, vulnerability management, disaster recovery, access management, configuration management, audit logging, and segregation of duties.
• Be capable of executing risk-based audits from initial objective definition and risk assessment through control testing, impact analysis, recommendations, and final effectiveness reporting.
• Have experience leading cybersecurity audits, technology reviews, or security assessments, ideally within a large or global organization.
• Communicate technical information, risks, and audit findings clearly in both English and Portuguese to technical and non-technical audiences.
• Demonstrate excellent analytical, critical-thinking, organization, and time-management skills, with the ability to manage multiple priorities and complex audit engagements.
• A bachelor's or master's degree in Information Security, Information Systems, Computer Science, or a related field is preferred.
• Hold one or more relevant professional certifications, such as CISA, CISSP, CISM, CRISC, CIA, CDPSE, ITIL, cloud certifications from Microsoft Azure, AWS, or Google Cloud, SAP certifications, or equivalent IT, audit, risk, security, or governance credentials.

Benefits

• Fully remote position based in Brazil.
• Full-time Monday-to-Friday schedule, from 8:00 AM to 5:00 PM.
• Opportunity to work on large-scale technology transformation initiatives spanning ERP, cloud, SaaS, system integration, and AI environments.
• Exposure to complex cybersecurity, technology risk, governance, audit, and enterprise control challenges.
• Access to professional development opportunities, including certifications, coaching, continuous feedback, and hands-on learning.
• Opportunities to develop in-demand technical skills through learning programs and certifications involving technologies from providers such as Microsoft, Google, and Amazon.
• Supportive and inclusive environment focused on well-being, belonging, continuous learning, and professional growth.