IT Audit and Controls Analyst

FCamara Consulting & Training

. Conduct analyses and assessments of controls related to identity and access management (IAM), particularly technical and privileged access .

Posted 9/30/2026full-timeBelo Horizonte • BrazilMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Identity and Access Management (IAM) and Privileged Access Management (PAM), with a strong focus on risk assessment methodologies and control effectiveness testing. Proficient in conducting IT audits, analyzing technical evidence, and preparing detailed technical reports to support compliance and security initiatives.

Highest-signal resume keywords

Identity And Access Management (IAM)Privileged Access Management (PAM)IT Audit ExperienceRisk Assessment MethodologiesTechnical Reporting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Access Control AssessmentControl Effectiveness TestingTechnical Evidence AnalysisAuthorization Profile AssessmentSegregation Of DutiesIT General Controls (ITGC)Audit Process KnowledgeEvidence DocumentationRemediation Follow-UpAccess Control Analysis

Soft Skills

Strong Communication SkillsCross-Functional Collaboration

Tools & Technologies

CyberArkSailPointBeyondTrustMicrosoft Entra IDAWS

Certifications & Qualifications

CISACRISCCISMISO 27001

Industry Keywords

Technology Risk ManagementInformation SecurityFinancial SectorRegulatory ComplianceCybersecurity Guidelines

Tech Stack

Tools & technologies

AWS

About the role

Key responsibilities & impact

Conduct analyses and assessments of controls related to identity and access management (IAM), particularly technical and privileged access
Validate scenarios involving the granting, modification, revocation, and recertification of access to systems, applications, databases, and infrastructure environments
Assess the adequacy of access profiles based on least privilege, need-to-know, and segregation of duties principles
Identify technology risks associated with inappropriate access, excessive permissions, privileged accounts, service accounts, and technical credentials
Perform IT internal control testing, including evidence analysis, sampling, deviation identification, and documentation of results
Assess the effectiveness of preventive, detective, and corrective controls related to access security
Support internal and external audits by organizing evidence, identifying nonconformities, and monitoring action plans
Prepare technical reports outlining identified risks, potential impacts, and improvement recommendations
Collaborate with Information Security, Infrastructure, IAM, IT Governance, Risk, and Compliance teams

Requirements

What you’ll need

Professional experience in IT audit, technology internal controls, technology risk management, or information security
Knowledge of identity and access management (IAM) processes, including privileged access management (PAM)
Experience assessing logical access controls, authorization profiles, and segregation of duties
Knowledge of risk assessment methodologies and control effectiveness testing
Familiarity with COBIT, ISO/IEC 27001, ISO/IEC 27002, and NIST
Ability to analyze technical evidence, logs, permission reports, and access matrices
Knowledge of audit processes, including test planning, finding documentation, and remediation follow-up
Strong technical reporting, communication, and cross-functional collaboration skills
Experience in IT audit and risk consulting, particularly with Big Four firms or similar consulting firms, is a plus
Experience in IT Internal Audit, Internal Controls, IT Risk, IT Compliance, or Information Security is a plus
Experience in the financial sector, digital banks, fintechs, or environments regulated by the Central Bank is a plus
Knowledge of IT general controls (ITGC) is a plus
Experience with IAM/PAM tools such as CyberArk, SailPoint, BeyondTrust, or Microsoft Entra ID is a plus
Knowledge of access controls in AWS, operating systems, databases, and enterprise applications is a plus
Familiarity with regulatory requirements for financial institutions and cybersecurity guidelines is a plus
CISA, CRISC, CISM, ISO 27001, or equivalent certifications are desirable

Benefits

Comp & perks

Position also open to people with disabilities
Hybrid work model available