Cybersecurity Auditor

Who We Are

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world's leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.

The Role

Cybersecurity experience
Knowledge of security, internal controls, audit and risk management frameworks and concepts, e.g. ISO27000, COSO, NIST, Cobit, IPPF, ITIL
Knowledge and experience with audit/review of IT controls, processes and security settings, e.g. change management, incident management, access management including authentication and authorization, patch management, secure system and application configuration, data integrity and protection, database administration, API management, inventory management, vulnerability scanning, security assessment, operation management, business continuity and disaster recovery, risk management
Understand and execute the audit process using a risk-based audit approach, understand the objective, perform analysis of the process and associated risks, develop and conduct formal testing to determine if controls are effective to mitigate or manage risks, communicate the impact for achieving objectives, and develop recommendations, preparing a final report that communicates an effectiveness status for each risk
Effectively and professionally presents and communicates issues, risks and technical information in a clear and concise manner to technical and non-technical audiences in English

• Undergraduate or master's degree preferable in one of the following areas: Information Security, Information Systems, Computer Science
• Experience related to cybersecurity, risk management or IT audits
• Possession of at least one of the following certifications: CISA, CISM, CISSP, or other relevant certification
• Strong knowledge of cybersecurity regulations, laws, and standards
• Familiar with frameworks such as COBIT, ISO 27001/2, NIST, SOX, and General security practices
• Understand and execute the audit process using a risk-based audit approach, understand the objective, perform analysis of the process and associated risks, develop and conduct formal testing to determine if controls are effective to mitigate or manage risks, communicate the impact for achieving objectives, and develop recommendations, preparing a final report that communicates an effectiveness status for each risk
• Strong knowledge and understanding of cybersecurity processes and concepts (e.g., incident response, software development, security governance, cloud computing, SDLC, vendor risk management, penetration testing, vulnerability management, disaster recovery, segregation of duties, auditing and logging, physical security, access management, configuration management)
• Experience in leading cybersecurity audits/reviews and performing security assessments for a global organization
• Excellent time management skills
• Effectively and professionally presents and communicates issues, risks and technical information in a clear and concise manner to technical and non-technical audiences in English and Portuguese