IT Risk and Controls Consultant

Job Posting Organization:
The IDB Group is a community dedicated to improving lives in Latin America and the Caribbean. Established with a mission to foster sustainable development and economic growth, the organization comprises a diverse workforce that collaborates in an inclusive and rewarding environment. The IDB Group operates across multiple countries in the region, focusing on various sectors to enhance the quality of life for individuals and communities. The organization values diversity and aims to create a workplace where everyone can thrive and contribute to meaningful change.

Job Overview:
The position of IT Compliance Controls and Automation Testing Consultant is situated within the Technology and Transformation Department (TTD) of the IDB Group. This department is responsible for providing essential information and technology tools, solutions, and services that support the Bank's operations and governance of information technology. The consultant will play a crucial role in identifying risks and testing controls for IT systems during self-assessment processes, as well as conducting automation testing for software applications to ensure quality. The consultant will work closely with the Technology, Data and Assurance Unit (TTD/TDA) and Product Family Owners, reporting directly to the TDA Compliance Team Leader. This role requires a collaborative and analytical approach to enhance the Bank's IT compliance and risk management efforts.

Duties and Responsibilities:
The consultant will engage in various activities, including participating in the design and execution of internal control testing exercises, which are conducted annually for each IT General Control (ITGC). They will work alongside TTD/TDA to identify applicable IT internal controls for new system implementations and assess their downstream implications. Continuous monitoring of highly privileged accounts across various infrastructure components, such as databases and cloud services, will be a key responsibility, along with advising Product Owners and Technical Leaders on implementing monitoring controls. The consultant will also review, update, and create documentation related to ITGCs, including operational and monitoring documents. They will meet with stakeholders to understand control performance and identify automation needs for control testing. Coordination with outsourced automation testing providers will be necessary to ensure that the unit meets the needs of Product Owners and Technical Leads, covering functional, regression, performance, and security" style="border-bottom: 1px dotted #007bff !important;">security testing. Additionally, the consultant will conduct research and provide technical recommendations on control design and deployment to meet testing and CI/CD requirements, presenting these recommendations to stakeholders.

Required Qualifications:
Candidates must possess a Master’s degree (or equivalent advanced degree) in Computer Science or a related field relevant to the role's responsibilities. They should have at least 5 years of progressive experience in Information Systems, IT Audit, IT Risk Management, or automation testing. This experience should encompass IT risk assessment, controls, compliance, remediation, and familiarity with relevant frameworks such as ISO 27001/27002, SOC 2, SOX, NIST, COBIT, and COSO. Proficiency in cloud technologies, DevSecOps, version control systems, Jira, ServiceNow, and Power BI is essential. Effective documentation, presentation skills, and the ability to collaborate with cross-functional stakeholders are also required. Experience with controls automation in Microsoft Azure is considered a plus.

Educational Background:
The educational requirement for this position is a Master’s degree or an equivalent advanced degree in Computer Science or other fields that are relevant to the responsibilities of the role. This educational background is crucial for understanding the complexities of IT systems and compliance requirements.

Experience:
The ideal candidate should have a minimum of 5 years of relevant experience in the fields of Information Systems, IT Audit, IT Risk Management, or automation testing. This experience should include a strong focus on IT risk assessment, compliance, and the implementation of controls, as well as familiarity with various frameworks that govern IT practices. The candidate should also have experience in automation testing and a solid understanding of the technologies and methodologies used in this area.

Languages:
Proficiency in both Spanish and English, both spoken and written, is mandatory for this position. Additionally, knowledge of French and Portuguese is considered advantageous, as it may facilitate communication within the diverse environment of the IDB Group.

Additional Notes:
This position is classified as a National Consultant under a Local Remote Modality, with a contract duration of 9 months. The IDB Group offers a competitive compensation package along with various benefits, including health insurance, a savings plan, and opportunities for professional development. Employees are entitled to 2 days of leave per month, as well as gender-neutral parental leave. The organization promotes a culture of health and well-being, providing access to health services and preventive care. The IDB Group is committed to inclusivity and diversity, ensuring that all employees can bring their authentic selves to work and contribute to the organization's mission.