Senior Technology Risk and Internal Controls Analyst

. Conduct risk and internal control assessments related to Information Technology, Information Security, and Data Management processes; .

Posted 9/26/2026full-timeSão Paulo • BrazilSeniorWebsite

Key responsibilities & impact

Conduct risk and internal control assessments related to Information Technology, Information Security, and Data Management processes;
Map, review, and monitor internal controls associated with access management, change management, systems development, business continuity, infrastructure, and cybersecurity;
Assess the effectiveness of implemented controls and propose improvements to mitigate technology risks;
Support technology teams in defining and monitoring action plans resulting from risk assessments, audits, and control testing;
Conduct compliance analyses against policies, internal standards, and frameworks related to risk and control management;
Develop Power BI indicators and dashboards to monitor technology risks and controls;
Work collaboratively with Technology, Information Security, Internal Audit, Compliance, and Risk Management teams;
Support internal and external audit processes related to technology controls;
Help promote a risk and internal controls culture focused on technology processes;
Participate in the continuous improvement of the Company's risk and internal controls methodology.

What you’ll need

Bachelor's degree in Information Technology, Information Systems, Computer Science, Engineering, Business Administration, Accounting, or a related field;
Experience in Risk Management, Internal Controls, Internal Audit, or External Audit, with a focus on technology processes;
Knowledge of technology internal control assessments (IT Controls / ITGC);
Knowledge of the COSO and ISO 31000 frameworks;
Experience with Power BI;
Experience developing risk and control matrices;
Ability to interact effectively with technical and business teams.
Preferred: Experience at a Big Four firm;
Preferred: Knowledge of Information Technology General Controls (ITGC);
Preferred: Knowledge of the COBIT, ISO 27001, and ISO 27701 frameworks;
Preferred: Familiarity with Brazil's General Data Protection Law (LGPD), Information Security, and Access Management;
Preferred: Certifications related to risk management, auditing, or information security.

Comp & perks