Manage and perform internal audit projects to evaluate the existing control environment and support the business in managing risks.
Participate in a broad range of assurance activities to assess security risks and identify IT control weaknesses.
Ensure that audits are delivered in line with the methodology
announcement, execution, report elaboration and validation with IT / Internal Audit Leadership.
Manage IT Audits with a broad focus on Information Security domain / capabilities e.g. Cyber Threat, Identity and Access Management, Data Protection, Cloud Security / Resilience, 3rd party security, integrated audits related to web applications, databases and commerce platforms, as well as audits of data & information privacy, etc.
Manage IT auditors to ensure the team effectively execute planned activities.
Acts as a trusted advisor to the IT / Cybersecurity organization and management.
Work with a Data Analytics team to ensure the maintenance of existing audit tools and creation of new tools / reports requested by the Audit Team.

5+ years of experience in Internal Audit delivering successful information security / cybersecurity audits.
Excellent knowledge of auditing Cyber Security, Network, Applications, Cloud, Third Parties and knowledge of key areas such as: Threat intelligence, security monitoring, Identity & User Access Management, Vulnerability management.
Good understanding of IT Control Frameworks, such as COBIT, ISO27001, ITIL, etc.
Experience acting in the Business Intelligence / Analytics / Insights area.
Excellent (audit) report writing and oral communication skills.
CISA/CIA/CISSP/CISM/CEH or equivalent designation highly desirable.
Fluency in English and Spanish.

Senior Manager, IT Audit

Key skills