This is a fully remote position, open to applicants in Brazil.

📋 Description

• Evaluate access controls, change management, IT operations, SDLC, information security, and business continuity.

• Conduct walkthroughs, sampling tests, re-execution of controls, and evidence inspection.

• Collaborate on vulnerability management, security testing, penetration testing, security monitoring, encryption, identity and access management, and change control.

• Perform quality control tests, evidence management, and assessment of global and regional controls.

• Work with regulatory requirements, GRC tools, dashboards, and compliance reporting.

⛳️ Requirements

• 2 to 4 years of experience in Compliance, IT Audit, ITGC Testing, risk management, internal controls, and regulated technology environments.

• Experience in evaluating access controls, change management, IT operations, SDLC, information security, and business continuity.

• Knowledge of walkthroughs, sampling tests, re-execution of controls, and evidence inspection.

• Familiarity with one or more tools or frameworks: SOC 2, ISO 27001, 7216, or information security control frameworks (ISP).

• Experience in vulnerability management, security testing, penetration testing, security monitoring, encryption, identity and access management, and change control.

• Experience or knowledge in quality control tests, evidence management, assessment of global and regional controls, and regulatory requirements.

• Experience or knowledge in Microsoft Office, evidence management tools, GRC tools, and compliance dashboards and reporting.

• Advanced English proficiency.

• CISA certification strongly preferred; CRISC, ISO 27001 Lead Auditor, ISO 42001, QMS, or ITGC certifications are advantageous.