[Hiring] IT Systems Implementation Auditor @Kyndryl

Role Description

Experience with system implementations and cybersecurity, knowledge of IT security, internal controls, auditing, and risk management frameworks, including ISO 27000, COSO, NIST, COBIT, IPPF, and ITIL.

• Experience auditing or reviewing IT controls, processes, and security configurations, including:
  • Change
  • Incident
  • Access
  • Patch
  • API
  • Inventory
  • Vulnerability
  • Operations
  • Database
  • Risk management
  • Authentication and authorization
  • Secure system and application configuration
  • Data integrity and protection
  • Data migration
  • System integrations and application controls
  • Security assessments
  • Business continuity and disaster recovery
• SOX experience is a plus.
• Execute risk-based audits and System Pre-Implementation Reviews (SPIRs) by:
  • Defining objectives
  • Evaluating processes and related risks
  • Designing and performing control testing
  • Assessing whether controls effectively mitigate risks
  • Communicating impacts on objectives
  • Developing recommendations
  • Preparing final reports that clearly state the effectiveness of controls for each identified risk
• Communicate issues, risks, and technical information clearly and professionally in English to both technical and non-technical audiences.
• Demonstrate strong analytical and critical-thinking skills.
• Lead teams of IT auditors in conducting SPIRs for technology transformation initiatives, including:
  • Enterprise Resource Planning (ERP) implementations
  • Cloud migrations
  • Software as a Service (SaaS) deployment
  • System integrations
  • AI solutions
• Assess project governance, solution design, security controls, data migration, testing, segregation of duties, operational readiness, and go-live risks.
• Demonstrate excellent time-management skills.

Qualifications

• 5+ years of professional experience in Information Technology, IT Audit, Technology Risk, System Implementations, IT Operations, Application Development, Cloud Technologies, or a related technical field.
• Experience participating in or assessing large-scale technology implementations, ERP transformations, cloud migrations, SaaS deployments, system integrations, AI initiatives, or other enterprise transformation programs.
• Experience in cybersecurity, SOX, risk management, or IT auditing.
• Strong knowledge of cybersecurity laws, regulations, and standards.
• Familiarity with COBIT, ISO 27001/27002, NIST, COSO, and general security practices.
• Ability to execute risk-based audits by defining objectives, assessing processes and risks, testing control effectiveness, communicating impacts, developing recommendations, and reporting an effectiveness conclusion for each risk.
• Strong knowledge of cybersecurity processes and concepts, including:
  • Incident response
  • Secure software development
  • Security governance
  • Cloud computing
  • SDLC
  • Third-party risk management
  • Penetration testing
  • Vulnerability management
  • Disaster recovery
  • Segregation of duties
  • Audit logging
  • Physical security
  • Access management
  • Configuration management
• Experience leading cybersecurity audits and reviews and conducting security assessments for a global organization.
• Excellent time-management skills.
• Ability to communicate issues, risks, and technical information clearly and professionally in English and Portuguese to technical and non-technical audiences.

Requirements

• 7+ years of professional experience in Information Technology, IT Audit, Technology Risk, System Implementations, IT Compliance, Cloud Technologies, ERP implementations (SAP preferred), or related technology governance and assurance functions.
• A bachelor’s or master’s degree in information security, Information Systems, Computer Science, or a related field is preferred.
• One or more relevant professional certifications, such as:
  • CISA
  • CISSP
  • CISM
  • CRISC
  • CIA
  • CDPSE
  • ITIL
  • Cloud certifications (Microsoft Azure, AWS, Google Cloud)
  • SAP certifications
  • Other related IT, audit, risk, security, or governance certifications

Benefits

• A dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow.
• Be Well programs designed to support your financial, mental, physical, and social health.
• Impactful work that powers the systems our customers rely on every day.
• Access to cutting-edge learning opportunities, including certifications with Microsoft, Google, and Amazon.
• Personalized development goals aligned with your ambitions.
• Continuous feedback to keep you inspired and on track.

Company Description

Diversity is a whole lot more than what we look like or where we come from; it is how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. Our Kyndryl Inclusion Networks are one of many ways we create a workplace where all Kyndryls can find and provide support and advice.