IT Internal Audit Manager

Own and execute the IT audit plan (SOX and non‑SOX) covering IT general controls, IT application controls, cybersecurity, cloud, data, and key business‑critical systems (including SAP).

Lead end‑to‑end IT audits over:

Cloud environments (primarily AWS) and related security / governance.

Information security (identity and access management, vulnerability management, monitoring, incident response).

Infrastructure and operations (backups, jobs, capacity, resilience).

Systems development and change management (including Git‑based workflows and CI/CD practices).

Key business applications and integrations supporting financial, payments and core operations, including SAP.

Drive the SOX ITGC and ITAC program in coordination with the broader Internal Audit and other teams, including design and operating effectiveness testing and evaluation of deficiencies.

Use advanced data and AI‑enabled tools to enhance audit coverage (e.g., automated sampling and testing, continuous monitoring, anomaly detection), and assess how AI and automation are designed, implemented and controlled within IT and business processes.

Identify, assess and prioritize technology risks using a structured, risk‑based methodology.

Produce clear, well‑structured audit reports and presentations for senior management and the Audit Committee, highlighting key risks, root causes and pragmatic, risk‑based remediation actions.

Monitor and challenge remediation of IT control deficiencies, ensuring that agreed action plans are realistic, timely and sustainable.

Act as a key counterpart for External Auditors on IT/SOX topics (scoping, walkthroughs, test results, issues and remediation status).

Build strong, trust‑based relationships with senior stakeholders across the company, positioning Internal Audit as an independent yet collaborative partner.

Lead and develop a high‑performing IT audit team: set expectations, coach and mentor, provide feedback, and promote a culture of learning, collaboration and innovation.

Contribute to the continuous improvement of our IT audit methodology, including the use of automation, data analytics and AI, and alignment with leading practices and frameworks.

8+ years of progressive experience in IT audit, technology risk, or a related area (internal audit, external IT audit, technology risk consulting). Experience in financial services, fintech and/or payments is strongly preferred.

University degree in Computer Science, Information Systems, Engineering or a related field.

Strong, hands‑on knowledge of cloud environments, ideally AWS (architecture, IAM, networking, logging/monitoring, resilience, configuration management).

Solid background in information security and IT governance, with exposure to frameworks such as ISO 27001, NIST, COBIT or similar.

Proven experience with SOX for IT (ITGC and ITAC), including scoping, design assessment, operating effectiveness testing and deficiency evaluation.

Good understanding of business and financial processes (e.g., revenue, payments, settlements, accounting & financial reporting) and how they depend on underlying systems and data.

Experience with SAP (e.g., FI/CO and related modules) and SAP‑related ITGC/ITAC assessments is strongly preferred.

Practical experience with software development and change processes, including Git‑based workflows, code review, CI/CD pipelines and change management controls.

Advanced data skills for audit work (e.g., SQL, scripting in Python, use of BI / analytics tools, experience with CAATs); ability to design and interpret data‑driven tests over large data sets.

Strong interest and experience in AI and automation: using AI / advanced analytics to improve audit work, and understanding the risk and control implications of AI use cases in IT and business flows.

Relevant professional certifications are a plus (e.g., CISA, CISSP, CISM, CRISC or equivalent).

Fluency in English (spoken and written) is mandatory; Spanish and/or Portuguese are a plus.

Demonstrated leadership and people‑management skills, including coaching, performance feedback and team coordination across locations.

Excellent communication and stakeholder management skills, with the ability to interact confidently with senior IT and business leaders and to operate in a dynamic, high‑growth environment.

Strong analytical, problem‑solving and critical‑thinking capabilities, and a collaborative, team‑oriented mindset.