Key skills
SDLCServiceNowIAMRisk ManagementChange ManagementRemote WorkPenetration Testing
About this role
Role Overview
- Perform testing and validation of IT controls (ITGC), ensuring they are properly designed and operating effectively;
- Assess controls in the following areas:
- Access management (IAM)
- Change management (Change Management / SDLC)
- Cybersecurity and data protection
- IT operations and monitoring
- Business continuity and Disaster Recovery
- Validate audit evidence, ensuring quality, completeness and compliance with requirements;
- Support internal and external audits (SOC 2, ISO 27001, among others), including:
- Responding to audit inquiries
- Organizing evidence
- Providing support throughout the audit lifecycle
- Execute tests of global and local Quality Management System (QMS) controls;
- Identify gaps, risks and control deficiencies, proposing remediation action plans;
- Track and ensure execution of remediation plans;
- Work with IT, security, risk and product teams to ensure compliance;
- Respond to stakeholder inquiries regarding compliance and controls;
- Assist in the design and improvement of controls and processes;
- Maintain updated compliance dashboards, reports and metrics;
- Support access reviews and security policy updates;
- Proactively identify risks and opportunities for continuous improvement.
Requirements
- 2 to 4 years of experience in:
- IT Compliance
- IT Audit
- ITGC control testing
- QMS or risk management
- Strong knowledge of:
- ITGC (IT General Controls)
- Control testing (design and operational effectiveness)
- Evidence management and audit support
- Familiarity with frameworks and standards: SOC 2
- ISO 27001
- Information Security Policies (ISP)
- Experience with:
- Access management (IAM)
- Change Management / SDLC
- Cybersecurity
- IT operations and monitoring
- Familiarity with testing methodologies:
- Walkthrough
- Sample testing
- Reperformance
- Inspection
- Experience with GRC tools:
- Archer
- ServiceNow GRC or similar
- Knowledge of:
- Vulnerability scans
- Penetration testing
- Security monitoring
- Proficiency in Microsoft Office suite (advanced Excel desirable);
Tech Stack
- SDLC
- ServiceNow
Benefits
- Remote work