Senior IT Auditor – ITGC, Cybersecurity

Insight IT

. Develop IT audit strategies, schedules, and plans .

Posted 9/25/2026full-timeRemote • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT auditing, including the development of audit strategies, test plans, and executive reports. Proficient in assessing ITGC and cybersecurity controls while effectively communicating findings and recommendations to stakeholders.

Highest-signal resume keywords

IT AuditingCybersecurity AuditsRisk And Control Matrices (RCMs)TOD/TOE TestingNIST Cybersecurity Framework (CSF)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

ITGC AuditsTest Of Design (TOD)Test Of Operating Effectiveness (TOE)Audit ProgramsRisk ManagementData Loss PreventionChange ManagementNetwork ProtectionEncryptionMalware Protection

Soft Skills

CommunicationCollaborationProblem SolvingStakeholder EngagementInterviewing

Tools & Technologies

COBIT 2019ITIL 4ISO/IEC 27001ISO/IEC 270025W2H Methodology

Industry Keywords

Big Four FirmsSOX AuditsOperational Technology (OT)Industrial Control Systems (ICS)Cyber Assessments

Tech Stack

Tools & technologies

Cyber SecurityIoT

About the role

Key responsibilities & impact

Develop IT audit strategies, schedules, and plans
Structure working papers for TOD/TOE testing of IT and Operational Technology (OT) controls
Develop test plans for test of design (TOD) and test of operating effectiveness (TOE), including verification attributes
Prepare Risk and Control Matrices (RCMs), audit programs, and control-specific request lists
Conduct interviews, kick-off meetings, wrap-up meetings, and closing meetings with business and technology teams
Execute TOD/TOE testing and interpret regulations and frameworks
Identify root causes of findings and issues identified during testing
Structure and consolidate audit points and recommendations
Develop action plans for identified findings and issues
Prepare testing results reports and executive IT audit reports
Assess ITGC and cybersecurity controls, including access, change management, operations/infrastructure, incidents, vulnerabilities, hardening, network protection, encryption, malware, logging, and data loss prevention
Communicate results and executive recommendations to stakeholders at different organizational levels

Requirements

What you’ll need

Bachelor’s degree required in Information Systems, Computer Science, Computer Engineering, Information Security, Information Technology, IT Auditing, or a related field
Minimum of 3 years of experience in IT auditing
Demonstrated experience conducting ITGC audits
Demonstrated experience conducting cybersecurity audits
Experience developing working papers, Risk and Control Matrices (RCMs), and audit programs
Experience conducting interviews and workshops with business and technology teams
Experience with TOD and TOE testing
Experience preparing executive audit reports
Experience working in highly regulated and technologically complex environments
Knowledge of the NIST Cybersecurity Framework (CSF), COBIT 2019, ITIL 4, ISO/IEC 27001, ISO/IEC 27002, the 5W2H methodology, IT risk management, and risk-based auditing
Experience with Big Four firms, SOX audits, industrial and automation environments (OT/ICS), Operational Technology (OT), IoT, AI, Data & Analytics, cyber assessments, security maturity assessments, and corporate internal audits is a plus

Benefits

Comp & perks

Remote work
Professional development opportunities in IT auditing, ITGC, cybersecurity, IT governance, and risk management