Senior Manager, IT Audit

Responsibilities

• Manage and perform internal audit projects to evaluate the existing control environment and support the business in managing risks.
• Participate in a broad range of assurance activities to assess security risks and identify IT control weaknesses.
• Ensure that audits are delivered in line with the methodology – announcement, execution, report elaboration and validation with IT / Internal Audit Leadership.
• Manage IT Audits with a broad focus on Information Security domain/capabilities such as Cyber Threat, Identity and Access Management, Data Protection, Cloud Security/Resilience, 3rd‑party security, integrated audits related to web applications, databases, commerce platforms, as well as audits of data & information privacy, etc.
• Manage IT auditors to ensure the team effectively executes planned activities.
• Acts as a trusted advisor to the IT / Cybersecurity organization and management.
• Work with a Data Analytics team to ensure the maintenance of existing audit tools and creation of new tools/reports requested by the Audit Team.

• 5+ years of experience in Internal Audit delivering successful information security / cybersecurity audits.
• Excellent knowledge of auditing Cyber Security, Network, Applications, Cloud, Third Parties and key areas such as Threat intelligence, security monitoring, Identity & User Access Management, Vulnerability management.
• Good understanding of IT Control Frameworks such as COBIT, ISO
  27001, ITIL, etc.
• Experience acting in the Business Intelligence / Analytics / Insights area.
• Excellent audit report writing and oral communication skills.
• CISA/CIA/CISSP/CISM/CEH or equivalent designation highly desirable.
• Fluency in English and Spanish.