IT Systems Implementation Auditor

Accountabilities:

• Execute risk-based audits and System Pre-Implementation Reviews (SPIRs) by defining objectives, evaluating processes and associated risks, designing and performing control testing, assessing control effectiveness, and documenting conclusions for identified risks.
• Lead audit reviews of major technology transformation initiatives, including Enterprise Resource Planning (ERP) implementations, cloud migrations, Software as a Service (SaaS) deployments, system integrations, AI solutions, and other large-scale enterprise programs.
• Assess project governance, solution architecture and design, security controls, data migration processes, system testing, segregation of duties, operational readiness, and risks associated with technology go-live activities.
• Review IT controls, processes, and security configurations across areas such as change management, incident management, access management, patching, APIs, inventory, vulnerability management, operations, databases, authentication, authorization, data integrity, and application controls.
• Evaluate cybersecurity and technology risk practices, including secure software development, security governance, cloud computing, SDLC, third-party risk, penetration testing, vulnerability management, disaster recovery, audit logging, physical security, and configuration management.
• Communicate audit findings, issues, risks, technical information, and potential business impacts clearly and professionally, while developing practical recommendations and preparing final reports.
• Lead teams of IT auditors during assigned SPIR and audit engagements, coordinating activities and maintaining strong delivery standards throughout the review lifecycle.
• Apply recognized audit, security, internal control, and risk frameworks such as COBIT, ISO 27000, NIST, COSO, IPPF, and ITIL to support consistent and effective assurance activities.

Requirements

• Bring at least 5 years of professional experience in Information Technology, IT Audit, Technology Risk, System Implementations, IT Operations, Application Development, Cloud Technologies, or a related technical field; 7+ years is preferred.
• Have experience participating in or assessing large-scale technology implementations, ERP transformations, cloud migrations, SaaS deployments, system integrations, AI initiatives, or other enterprise transformation programs.
• Demonstrate professional experience in cybersecurity, SOX, risk management, IT auditing, compliance, or related technology governance and assurance functions.
• Possess strong knowledge of cybersecurity laws, regulations, standards, and general security practices, with familiarity with COBIT, ISO 27001/27002, NIST, and COSO.
• Demonstrate a strong understanding of cybersecurity and IT control processes, including incident response, secure software development, security governance, cloud computing, SDLC, third-party risk management, vulnerability management, disaster recovery, access management, configuration management, audit logging, and segregation of duties.
• Be capable of executing risk-based audits from initial objective definition and risk assessment through control testing, impact analysis, recommendations, and final effectiveness reporting.
• Have experience leading cybersecurity audits, technology reviews, or security assessments, ideally within a large or global organization.
• Communicate technical information, risks, and audit findings clearly in both English and Portuguese to technical and non-technical audiences.
• Demonstrate excellent analytical, critical-thinking, organization, and time-management skills, with the ability to manage multiple priorities and complex audit engagements.
• A bachelor's or master's degree in Information Security, Information Systems, Computer Science, or a related field is preferred.
• Hold one or more relevant professional certifications, such as CISA, CISSP, CISM, CRISC, CIA, CDPSE, ITIL, cloud certifications from Microsoft Azure, AWS, or Google Cloud, SAP certifications, or equivalent IT, audit, risk, security, or governance credentials.

Benefits

• Fully remote position based in Brazil.
• Full-time Monday-to-Friday schedule, from 8:00 AM to 5:00 PM.
• Opportunity to work on large-scale technology transformation initiatives spanning ERP, cloud, SaaS, system integration, and AI environments.
• Exposure to complex cybersecurity, technology risk, governance, audit, and enterprise control challenges.
• Access to professional development opportunities, including certifications, coaching, continuous feedback, and hands-on learning.
• Opportunities to develop in-demand technical skills through learning programs and certifications involving technologies from providers such as Microsoft, Google, and Amazon.
• Supportive and inclusive environment focused on well-being, belonging, continuous learning, and professional growth.