Lead strategic risk and internal controls initiatives in a highly complex environment
Work closely with senior leadership, influencing key business decisions
Exercise autonomy in decision-making, considering the value chain and strategic objectives
Connect risks, strategy, and operations, supporting areas in risk-aligned management
Conduct assessments and tests of internal controls with a focus on value generation
Apply market frameworks such as NIST, COBIT, ISO 22301/27001, and ITIL in day-to-day activities
Critically evaluate the effectiveness of controls and propose structural improvements
Serve as a technical reference, raising the maturity level in risk and controls
Translate technical topics into clear, business-relevant impacts
Influence and lead discussions with stakeholders across levels and functions
Operate in a dynamic, regulated environment, proactively addressing complex challenges

Bachelor's degree in IT or related field
Postgraduate degree in IT or related field preferred
Active ISO 27001 certification (mandatory — will be requested during the selection process)
Advanced knowledge of Information Security
Advanced knowledge in: Secure Development, Forensic Security, Vulnerability Management, Penetration Testing (Pentest), Identity Management, Security Architecture, and AWS Cloud
Advanced knowledge of security solutions such as: Antivirus, DLP, IDS, IPS, Web Filter, Mail Filter, Firewall, Proxy, MDM, WAF, Database Monitoring, and SIEM
Experience working with business areas in a consultative capacity, with a critical mindset and strong analytical skills
Practical experience with analysis tools such as MS Excel, Power BI, ACL, and MS Copilot
Experience in an audit consultancy environment, working on risk, internal controls, or information security projects

Risk and Internal Controls Analyst – Security & Technology

Key skills