Consultant Internal Audit

• Education: Degree in Computer Engineering, Telecommunications Engineering, Industrial Engineering, or MBA, or a background in finance/business administration with an interest in Technology.
• Minimum experience of 1 to 2 years in IT auditing / IT consulting.
• Competency profile: We are looking for someone accustomed to working in a team, outgoing, with strong communication, analytical, and organizational skills. Proactive, with a critical mindset and a willingness to learn. Capable of managing teams.
• We are looking for profiles with a strong client orientation, accustomed to project management, with technological curiosity and a desire to add value to our team.

• Languages: Advanced level of English.
• Good command of computer tools.
• Knowledge of ERPs such as SAP Hana or Navision.
• Valuable certifications: CISA (Certified Information Systems Auditor), CISM (Certified Information Security Management), and other similar certifications.
• Knowledge of standards and regulations such as COBIT, COSO, NIST, ISO 27001, ISO 22301

• A great working environment, both inside and outside the office.
• International opportunities and a global professional network.
• Continuous training: access to training and certifications.
• Competitive salary and flexible compensation plan.
• Remote work options, from wherever and however you want.
• Opportunity to get involved in professional volunteering projects.

From the IT Audit department, you will get to know, from the very beginning, the technological environment of the main national companies whose financial statements are audited by EY, and evaluate the controls implemented to manage their different technological risks, by interviewing the Chief Technology Officers of these companies and their main collaborators.

You will carry out, among others, the following functions:

Understand the IT environment of the companies we audit: Identify the technological platform (environments, applications, databases...) related to the companies' financial statements through interviews with the different heads of the technology department and analysis of the provided documentation.

Validate existing controls: Evaluate the design, implementation, and effectiveness of the controls established to cover existing risks in the areas of logical security, communications, application development, systems operations (ITGCs), business processes and their applications (ITACs), etc.

Perform automated testing: Verify the functioning, calculations, integrity, and consistency of a given business process by simulating it using CAAT (Computer Assisted Auditing Techniques) and IT tools such as ACL, IDEA, Alteryx, etc.

Issue improvement recommendations: Based on the results obtained, advise our clients on how they can remedy their weaknesses and improve the controls of their technological platform.