Senior Risk and Internal Controls Analyst

CAIXA Consórcio

. Map, identify, and measure risks across organizational processes, with a focus on Technology and Information Security .

Posted 10/2/2026full-timeSão Paulo • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in risk management and internal controls, particularly in IT infrastructure and information security. Proficient in assessing control effectiveness, data analysis, and implementing corrective actions aligned with industry standards.

Highest-signal resume keywords

Risk ManagementInternal ControlsControl Testing AutomationData AnalysisInformation Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentControl Design AssessmentChange ManagementAccess ManagementIncident ManagementVulnerability ManagementBusiness ContinuityBackup and RestoreData AnalysisControl Testing

Tools & Technologies

ExcelPower BI

Industry Keywords

COSOCOBITISO 27001ISO 31000Sarbanes-Oxley Act (SOX)Brazil's General Data Protection Law (LGPD)IT GovernanceRegulatory RequirementsFinancial InstitutionsRisk-Aware Culture

About the role

Key responsibilities & impact

Map, identify, and measure risks across organizational processes, with a focus on Technology and Information Security
Maintain the risk matrix, strengthening risk management and operational efficiency
Assess the design and effectiveness of internal controls
Propose improvements and action plans to address deficiencies
Perform control testing related to IT infrastructure, including change management, vulnerability management, backups, business continuity, availability, assets, and IT operations
Perform control testing related to Information Security, including access and privilege management, segregation of duties, incidents, logical security, policies, procedures, and information protection
Monitor risk appetite indicators monthly in partnership with the Technology and Information Security teams
Drive corrective actions when necessary
Contribute to the periodic updating of the department's dashboards
Contribute to the review and updating of Risk Management and Internal Controls policies and standards
Promote a risk-aware culture and alignment with industry best practices

Requirements

What you’ll need

Bachelor's degree in Business Administration, Economics, Computer Science, Information Systems, Engineering, or a related field
Intermediate English proficiency
Solid experience in risk and internal controls related to IT infrastructure and information security
Hands-on experience mapping and measuring risks and identifying and documenting controls
Experience assessing control design and operating effectiveness, analyzing evidence, and addressing exceptions
Experience with data analysis and/or control testing automation
Experience with Access Management, Change Management, Incident Management, Backup and Restore, Business Continuity, Vulnerability Management, and Information Security
Knowledge of COSO
Knowledge of COBIT
Knowledge of ISO 27001, ISO 31000, and similar standards
Knowledge of the Sarbanes-Oxley Act (SOX)
Intermediate Excel skills
Basic Power BI skills
Experience in Internal Audit or experience at a Big Four firm is a plus
Knowledge of Brazil's General Data Protection Law (LGPD), IT governance, and applicable regulatory requirements for financial institutions is a plus

Benefits

Comp & perks

Profit-Sharing and Results-Based Bonus
Medical Insurance
Dental Insurance
Transportation Allowance
Food Allowance
Meal Allowance
Private Pension Plan
Life Insurance
Funeral Assistance
Childcare/Nanny Allowance
Wellhub (formerly Gympass)
Pharmacy Allowance
Sick Leave Supplement
Internet Allowance
Home Office Allowance
Mobility Allowance
Day Off