IT Systems Implementation Auditor

This is a remote technology assurance role focused on evaluating the security, governance, and risk controls surrounding major systems implementations.
You will conduct risk-based audits and System Pre-Implementation Reviews (SPIRs) to help ensure transformation initiatives are secure, controlled, and ready for successful deployment.
The role spans enterprise technology programs including ERP implementations, cloud migrations, SaaS deployments, system integrations, and AI initiatives.
You will assess project governance, solution design, data migration, testing, segregation of duties, operational readiness, and go-live risks.
The position combines technical cybersecurity knowledge with strong auditing, analytical, and stakeholder-management capabilities.
You will lead teams of IT auditors while communicating complex risks and recommendations to both technical and non-technical audiences.
This opportunity is well suited to an experienced IT audit or technology risk professional who wants to influence large-scale technology transformations and strengthen enterprise controls.

• Bring at least 5 years of professional experience in Information Technology, IT Audit, Technology Risk, System Implementations, IT Operations, Application Development, Cloud Technologies, or a related technical field; 7+ years is preferred.
• Have experience participating in or assessing large-scale technology implementations, ERP transformations, cloud migrations, SaaS deployments, system integrations, AI initiatives, or other enterprise transformation programs.
• Demonstrate professional experience in cybersecurity, SOX, risk management, IT auditing, compliance, or related technology governance and assurance functions.
• Possess strong knowledge of cybersecurity laws, regulations, standards, and general security practices, with familiarity with COBIT, ISO 27001/27002, NIST, and COSO.
• Demonstrate a strong understanding of cybersecurity and IT control processes, including incident response, secure software development, security governance, cloud computing, SDLC, third-party risk management, vulnerability management, disaster recovery, access management, configuration management, audit logging, and segregation of duties.
• Be capable of executing risk-based audits from initial objective definition and risk assessment through control testing, impact analysis, recommendations, and final effectiveness reporting.
• Have experience leading cybersecurity audits, technology reviews, or security assessments, ideally within a large or global organization.
• Communicate technical information, risks, and audit findings clearly in both English and Portuguese to technical and non-technical audiences.
• Demonstrate excellent analytical, critical-thinking, organization, and time-management skills, with the ability to manage multiple priorities and complex audit engagements.
• A bachelor's or master's degree in Information Security, Information Systems, Computer Science, or a related field is preferred.
• Hold one or more relevant professional certifications, such as CISA, CISSP, CISM, CRISC, CIA, CDPSE, ITIL, cloud certifications from Microsoft Azure, AWS, or Google Cloud, SAP certifications, or equivalent IT, audit, risk, security, or governance credentials.