IT Systems Implementation Auditor

About the company

Kyndryl is a company where people of all cultures, backgrounds, and experiences are welcome. Through initiatives such as the Kyndryl Inclusion Networks, the company builds a workplace where everyone can bring their whole self to work, individually and collectively, and support an equitable culture. That is the Kyndryl Way.

About the role

We are looking for an experienced IT Systems Implementation Auditor to execute risk-based audits and System Pre-Implementation Reviews (SPIRs) for technology transformation initiatives. This includes Enterprise Resource Planning (ERP) implementations, cloud migrations, Software as a Service (SaaS) deployments, system integrations, and AI solutions. The role combines deep knowledge of cybersecurity, internal controls, auditing, and risk management frameworks with hands-on leadership of IT audit teams.

Responsibilities

• Execute risk-based audits and System Pre-Implementation Reviews (SPIRs) by defining objectives, evaluating processes and related risks, and designing and performing control testing.
• Assess whether controls effectively mitigate risks and communicate impacts on objectives.
• Develop recommendations and prepare final reports that clearly state the effectiveness of controls for each identified risk.
• Lead teams of IT auditors in conducting SPIRs for technology transformation initiatives, including ERP implementations, cloud migrations, SaaS deployments, system integrations, and AI solutions.
• Assess project governance, solution design, security controls, data migration, testing, segregation of duties, operational readiness, and go-live risks.
• Audit or review IT controls, processes, and security configurations, including change, incident, access, patch, API, inventory, vulnerability, operations, database, and risk management.
• Review authentication and authorization, secure system and application configuration, data integrity and protection, data migration, system integrations, application controls, security assessments, and business continuity and disaster recovery.
• Communicate issues, risks, and technical information clearly and professionally in English to both technical and non-technical audiences.

Requirements

• 5+ years of professional experience in Information Technology, IT Audit, Technology Risk, System Implementations, IT Operations, Application Development, Cloud Technologies, or a related technical field.
• Experience participating in or assessing large-scale technology implementations, ERP transformations, cloud migrations, SaaS deployments, system integrations, AI initiatives, or other enterprise transformation programs.
• Experience in cybersecurity, SOX, risk management, or IT auditing.
• Strong knowledge of cybersecurity laws, regulations, and standards.
• Familiarity with COBIT, ISO 27001/27002, NIST, COSO, and general security practices.
• Ability to execute risk-based audits by defining objectives, assessing processes and risks, testing control effectiveness, communicating impacts, developing recommendations, and reporting an effectiveness conclusion for each risk.
• Strong knowledge of cybersecurity processes and concepts, including incident response, secure software development, security governance, cloud computing, SDLC, third-party risk management, penetration testing, vulnerability management, disaster recovery, segregation of duties, audit logging, physical security, access management, and configuration management.
• Experience leading cybersecurity audits and reviews and conducting security assessments for a global organization.
• Ability to communicate issues, risks, and technical information clearly and professionally in English and Portuguese to technical and non-technical audiences.

Nice to have

• 7+ years of professional experience in Information Technology, IT Audit, Technology Risk, System Implementations, IT Compliance, Cloud Technologies, ERP implementations (SAP preferred), or related technology governance and assurance functions.
• A bachelor's or master's degree in Information Security, Information Systems, Computer Science, or a related field.
• One or more relevant professional certifications, such as CISA, CISSP, CISM, CRISC, CIA, CDPSE, ITIL, cloud certifications (Microsoft Azure, AWS, Google Cloud), SAP certifications, or other related IT, audit, risk, security, or governance certifications.
• SOX experience is a plus.

Soft skills

• Strong analytical and critical-thinking skills.
• Excellent time-management skills.
• Growth mindset, with keen interest in driving your own personal and professional development.
• Customer-focused, prioritizing customer success in your work.
• Open and borderless, naturally inclusive in how you work with others.

Work model and location

This is a remote position based in Brazil. Working hours are from 8:00 AM to 5:00 PM, Monday to Friday.