IT Risk and Controls Consultant

About the role

The Technology and Transformation Department (TTD) of the IDB Group provides the information and technology tools, solutions and services that enable the operation and management of the Bank. It is looking for an analytical, collaborative and results-oriented IT Compliance Controls and Automation Testing Consultant to work with the Technology, Data and Assurance Unit (TTD/TDA) and Product Family Owners. The consultant identifies risks and tests controls for in-scope IT systems during self-assessments and runs automation testing for software applications, reporting to the TDA Compliance Team Leader.

Key responsibilities

• Take part in designing and running the annual IT General Control (ITGC) testing exercise with TTD/TDA members.
• Identify which IT internal controls apply to new system implementations and assess their downstream implications.
• Continuously monitor highly privileged accounts across databases, operating systems, cloud components, privileged identity management solutions and applications, and advise Product Owners and Technical Leaders on implementing monitoring controls.
• Help review, update and create ITGC documentation, including procedures, operational and monitoring documents and inventories.
• Meet with stakeholders to understand how controls are performed and identify automation needs.
• Coordinate with outsourced automation testing providers for functional, regression, performance and security testing.
• Research and recommend how controls can be designed and deployed to meet testing and CI/CD requirements.

Required profile

• Master's degree (or equivalent advanced degree) in Computer Science or another relevant field.
• At least 5 years of progressive experience in information systems, IT audit, IT risk management or automation testing.
• Knowledge of IT risk assessment, controls, compliance, remediation and frameworks such as ISO 27001/27002, SOC 2, SOX, NIST, COBIT and COSO.
• Proficiency in Spanish and English, spoken and written; French and Portuguese are preferable.
• Citizen of one of the 48 member countries and eligible to work locally without sponsorship; no close relatives working at the IDB group.

Required skills

• Cloud technologies, DevSecOps, version control, Jira, ServiceNow and Power BI.
• Controls automation in Microsoft Azure is a plus.
• Desirable certifications: CISA, CISM, CRISC, CISSP, ISTQB or Selenium-related credentials.
• Knowledge of AI and generative AI and its ethical use.

What we offer

• Competitive compensation package.
• Leave of 2 days per month of contract plus gender-neutral parental leave.
• Monthly allowance to supplement health insurance and a savings plan allowance depending on contract length.
• On-site position with occasional flexibility to work remotely.
• Learning support through seminars and 1:1 professional coaching, and access to a health services center.