Cyber Security Audit Tech Lead

Seasoned Director overseeing and managing the Cyber Security Audit team in Guadalajara, focusing on ensuring the quality and timely completion of audit deliverables. Develops risk-based audit plans, conducts technology-focused engagements, evaluates controls effectiveness, assesses cybersecurity measures, and communicate results to senior management and audit committee. Collaborates with external auditors provides technical expertise, and monitors audit issues.

Requirements

Must Haves

• 6+ years of years of Cyber Security Audit experience, preferably in a large and complex organization

• Excellent English communication skills (Professionally fluent, minimum level B2) (Client-facing)

• Bachelor's degree in computer science, information systems, accounting, or related

• Professional certification in IT auditing or Cybersecurity, such as CISA, CIA, CISSP, GSEC, Security+, or CISM

• Strong knowledge of technical frameworks, standards, and best practices, such as COBIT, ITIL, ISO 27001, and NIST

• Proficient in IT audit tools and techniques, such as data analytics, automated testing, and audit software

• Experience managing, mentoring, training, and coaching a team of technology-focused professionals

• Excellent communication, presentation, and interpersonal skills, with the ability to influence and build rapport with senior management and stakeholders

• Highly analytical, critical, and problem-solving skills, with the ability to identify and evaluate IT risks and controls

• Strong project management, leadership, and coaching skills, with the ability to plan, execute, and supervise multiple internal audit engagements

• Self-motivated, adaptable, and proactive, with the ability to work independently and collaboratively in a dynamic and fast-paced environment

• High ethical standards, integrity, and professionalism, with the ability to maintain confidentiality and objectivity

Responsibilities

• In this role you are working in a team, managing 2-3 people directly, and coordinating with other business units and external auditors.

• Manage the IT & Cyber audit team, resources, and schedule, and ensure timely completion and quality of audit deliverables

• Develop and maintain a risk-based IT & Cyber audit plan that aligns with the organization's strategic objectives and complies with professional standards

• Led and supervised technology-focused audit engagements, including scoping, testing, reporting, and follow-up activities

• Evaluate the design and operating effectiveness of technology-based controls, policies, and procedures, and identify areas for improvement and remediation

• Conduct audits of IT general controls, as well as controls over the development, deployment, and maintenance of our commercial software and SaaS products, also considering cybersecurity controls

• Assess and evaluate the effectiveness of cybersecurity measures, including the protection of sensitive data, network security, and incident response capabilities

• Communicate audit results and recommendations to senior management and the audit committee in a clear and concise manner

• Coordinate with external auditors and regulators on IT audit matters and provide support as needed

• Provide technical expertise and advice on IT & Cybersecurity risks, controls, and best practices to the audit team and the business units

• Monitor and report on the status of IT & Cyber audit issues and action plans

• Keep abreast of emerging IT & Cybersecurity trends, risks, and regulations, and update the IT audit methodology and tools accordingly

• Contribute to the continuous improvement of the internal audit function and foster a culture of collaboration and learning