Accountabilities:

The professional will support compliance programs by evaluating technology controls, assisting audit processes, and ensuring teams follow established governance and security practices. The role involves analyzing risks, validating evidence, and partnering with different teams to improve compliance maturity.

• Collaborate with IT product teams, security areas, risk management teams, and auditors to maintain compliance readiness.
• Support internal and external audit activities, from preparation and evidence collection to remediation tracking.
• Perform IT General Controls (ITGC) testing, including access management, change management, operations, SDLC, and resilience controls.
• Execute and support Quality Management System (QMS) control testing through walkthroughs, sampling, re-performance, and inspection activities.
• Review security policies, control frameworks, and governance requirements to ensure alignment with compliance standards.
• Identify, document, and escalate compliance and operational risks across technology environments.
• Validate evidence related to security controls, vulnerability assessments, penetration testing activities, and monitoring processes.
• Support continuous improvement initiatives related to compliance processes, reporting, and control effectiveness.

Requirements:

The ideal candidate has experience in compliance, IT auditing, risk management, or technology governance, with strong knowledge of security frameworks and control validation methodologies. The professional should be analytical, organized, and comfortable working with multiple stakeholders.

• Bachelor’s degree in Administration, Information Technology, Information Security, Risk Management, or related fields.
• 2 to 4 years of experience in compliance, IT auditing, ITGC testing, QMS testing, or risk management, preferably in regulated technology environments.
• Strong knowledge of compliance frameworks such as SOC 2, ISO 27001, and related control standards.
• Experience conducting audits, validating evidence, and supporting remediation activities.
• Practical experience with ITGC methodologies, including walkthroughs, sample-based testing, re-performance, and inspection.
• Knowledge of information security policies, governance frameworks, and control structures.
• Familiarity with access control systems, identity management, encryption standards, and change management workflows.
• Experience using Microsoft Office, GRC platforms, evidence management tools, reporting tools, and compliance dashboards.
• Ability to analyze risks, communicate findings clearly, and collaborate with multidisciplinary teams.

Preferred certifications and qualifications:

• CISA (Certified Information Systems Auditor).
• CRISC (Certified in Risk and Information Systems Control).
• ISO 27001 Lead Auditor certification.
• ISO 42001 or related Quality Management System certifications.
• Training or certifications focused on IT General Controls.

Benefits:

• Remote work model.
• Opportunity to work on compliance, risk, and technology governance initiatives.
• Exposure to international security and audit frameworks.
• Professional development in IT compliance, risk management, and information security.
• Collaboration with multidisciplinary teams in a structured technology environment.