Senior IT Internal Controls Analyst, ITGC

Lazzo Secondment

. Evaluate, monitor, and enhance IT General Controls (ITGC), ensuring compliance with internal policies and procedures .

Posted 10/23/2026contractSão Paulo • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT General Controls (ITGC), IT Risk Management, and IT Audit, with a strong focus on system access management and compliance with governance frameworks such as COSO, COBIT, and SOX. Proficient in SAP GRC Access Control and control analysis tools, with strong analytical and communication skills to collaborate effectively across teams.

Highest-signal resume keywords

IT General Controls (ITGC)SAP GRC Access Control (GRC AC)Segregation of Duties (SoD)Change ManagementCISA Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IT Risk ManagementSystem Access ManagementInternal Controls TestingControl Deficiency IdentificationGovernance FrameworksControl AnalysisPower BIProcess DocumentationEvidence GatheringIncident Management

Soft Skills

Analytical MindsetCritical ThinkingStrong CommunicationInterpersonal SkillsOrganization

Tools & Technologies

SAPGRC Access ControlControl Monitoring Tools

Certifications & Qualifications

CISACOBITITIL

Industry Keywords

SOX ComplianceBrazil’s General Data Protection Law (LGPD)IT AuditRisk and Control MatricesInternal Policies

About the role

Key responsibilities & impact

Evaluate, monitor, and enhance IT General Controls (ITGC), ensuring compliance with internal policies and procedures
Conduct analyses and testing of system access management, including the creation, modification, and revocation of permissions, as well as privileged access reviews
Assess Segregation of Duties (SoD) conflicts, identifying risks of inappropriate access and incompatible permissions
Work with SAP, particularly the GRC Access Control (GRC AC) module, supporting the analysis and validation of access requests
Assess system change management controls, including approvals, testing, deployments, and emergency changes
Execute tests of IT control design and operating effectiveness, documenting evidence, results, and improvement opportunities
Support the assessment of IT operational controls, including backups, system monitoring, incidents, and automated processes
Identify control deficiencies, support action plans, and monitor their implementation
Keep risk and control matrices up to date, contributing to process documentation and monitoring
Support internal and external audits, including SOX requests, evidence gathering, and walkthroughs
Partner with Information Technology and business teams
Report to the Risk and Internal Controls Management team

Requirements

What you’ll need

Bachelor’s degree in Business Administration, Accounting, Information Systems, Computer Science, Engineering, or a related field
Experience with IT Internal Controls (ITGC), IT Risk Management, and/or IT Audit
Hands-on experience with SAP, particularly the GRC Access Control (GRC AC) module
Knowledge of system access management, Segregation of Duties (SoD), and permissions assessment
Experience testing internal controls, managing changes (Change Management), and supporting IT operations
Knowledge of governance and control frameworks such as COSO, COBIT, and SOX
Knowledge of Power BI and familiarity with control analysis and monitoring tools
Analytical mindset, critical thinking, and the ability to assess risks and propose improvements
Strong communication and interpersonal skills, with the ability to collaborate effectively with Information Technology and other business teams
Autonomy, organization, and assertiveness when supporting technical positions and recommendations
Experience in large organizations, knowledge of Brazil’s General Data Protection Law (LGPD), and Information Security experience are considered a plus
Certifications such as CISA, COBIT, or ITIL are considered a plus
Contract type: Associate (active OAB registration) or contractor (PJ)

Benefits

Comp & perks

Hybrid work model, with 3 days onsite
3-month contract, with the possibility of renewal