IT and Operations Audit Expert

Evertec; San Juan (PR); On-site; USD 90,000 - 120,000; Full time

Job summary

Evertec in Puerto Rico is seeking an IT & Operations Audit Expert to lead risk assessments, design the annual audit plan, and ensure SOX and other controls are properly implemented across IT and operations.

You will partner with business leaders, drive remediation of control gaps, stay current with regulatory requirements, and report findings with clear, actionable recommendations to senior management.

Qualifications

• Minimum seven (7) years of IT auditing experience.
• Five or more years in IT or related business experience.
• Certified Information Systems Auditor (CISA) preferred.

Responsibilities

• Lead comprehensive assessment of technology and operational risks.
• Advise leadership on IT & Operations risks, trends, and improvements.
• Design, develop, and execute the annual IT & Operations audit plan.
• Define audit objectives, scope, and methodologies for risk-based coverage.
• Oversee remediation of findings with process owners.
• Evaluate IT & Operations controls including SOX.
• Prepare and issue audit reports with actionable recommendations.
• Stay updated on regulatory requirements and best practices.

Skills

IT audit

Risk assessment

Regulatory knowledge

Leadership communication

Education

Bachelor's degree in Business Administration / IT

Tools

CISA knowledge

Job description

General Description

Support efficiency and effectiveness of IT Internal Audit Division. Assist in evaluating IT-related risks and controls. Help develop and implement annual IT audit plan. Stay updated on IT regulatory requirements.

Job Title

IT & Operations Audit Expert

Job Band

Professional & Specialized

General Description

Support efficiency and effectiveness of IT Internal Audit Division. Assist in evaluating IT-related risks and controls. Help develop and implement annual IT audit plan. Stay updated on IT regulatory requirements.

ESSENTIAL DUTIES AND RESPONSIBILITIES

(Other duties may be assigned)

• Lead the comprehensive assessment of technology and operational risks, ensuring timely identification of control gaps and opportunities for improvement within the IT environment.
• Act as a strategic advisor to business leaders by communicating risks, trends, and opportunities related to IT & Operations, fostering a strong culture of compliance and risk management.
• Design, develop, and execute the annual IT & Operations audit plan, ensuring alignment with auditing standards, strategic priorities, and the organization's risk profile.
• Define and establish audit objectives, scope, methodological approach, and procedures, ensuring efficient, risk-based coverage of technology and operational processes.
• Oversee and collaborate with IT and operations process owners to ensure the effective implementation of corrective action plans, following up on the remediation of findings and control gaps.
• Independently evaluate the soundness, effectiveness, efficiency, and proper application of IT & Operations controls, including key and regulatory controls (e.g., SOX), as applicable.
• Lead the preparation and issuance of audit reports, ensuring clear conclusions, actionable recommendations, and visibility of critical matters to senior management and key stakeholders.
• Monitor and maintain up-to-date knowledge of regulatory requirements, standards, and best practices applicable to IT & Operations, ensuring proper integration into audit processes.
• Manage responses to deviations, exceptions, or escalations related to internal controls, ensuring appropriate documentation and effective communication with stakeholders.
• Drive continuous improvement in audit methodologies, tools, and practices to enhance the efficiency and overall impact of the IT & Operations Audit function.
• Ensures execution of all key controls including but not limited to SOX controls for role as per assigned roles within established procedures and within approved delegation of authority and authorized limits. Responds to and reviews all escalations or deviations that may be brought to his or her attention. Reports any exceptions to established internal controls and documents any employee.

Job Requirements

Education

Bachelor’s degree (B. A.) in Business Administration, Information Technology, Computer Science, or related field.

Experience

Minimum seven (7) years of IT auditing experience. Five or more years in IT or related business experience.

CERTIFICATES AND LICENSES

Certified Information Systems Auditor (CISA) preferred.