[Ambev Tech] Mid-level IT Compliance Analyst

We are looking for someone passionate about IT Governance, Risk, and Compliance, who enjoys understanding processes, identifying improvement opportunities, and contributing to an increasingly solid control environment.

In this position, you will act from the assessment of technology controls and SOX compliance, through risk analysis and evidence validation, to supporting the implementation of corrective actions and interacting with audits and global teams.

We are looking for someone with an analytical, collaborative, and organized profile, who has ease in navigating between different areas and contributing to the continuous evolution of technology processes and controls.

Responsibilities and assignments

• Plan and execute IT control tests related to applications, infrastructure, access management, changes, operations, and other technology processes.
• Evaluate the design and operational effectiveness of IT controls in compliance with SOX requirements.
• Identify failures, deviations, and improvement opportunities in the evaluated controls.
• Prepare documentation of the executed tests and properly record the assessment results.
• Support control owners in the definition, implementation, and validation of action plans for the remediation of identified deficiencies.
• Collect, analyze, and validate evidence to meet internal and external SOX audits.
• Monitor schedules, action plans, and indicators related to compliance activities and IT controls.

Requirements and qualifications

Experience with IT control testing and assessment. Experience in SOX audit processes. Knowledge of IT General Controls (ITGC), including access management, change management, and IT operations. Intermediate English or higher, with the ability to participate in meetings, document results, and interact with global teams. Critical analysis capacity for identifying risks and control deficiencies. Good verbal and written communication. Organization and ability to manage multiple demands simultaneously.

Desirable

Experience in multinational corporate environments. Knowledge of control and governance frameworks, such as COBIT, COSO, NIST, or ISO 27001. Experience with GRC tools, auditing, or control management.

Additional information

Benefits of working with us

To support you financially:

• Meal or food voucher;
• Transportation voucher;
• PPR Bonus (Profit Sharing Program);
• 14th salary;
• IAPP (Instituto Ambev de Previdência Privada).

To take care of your well-being and quality of life:

• Health insurance;
• Dental insurance;
• Life insurance;
• Extended maternity and paternity leave (60 and 15 days, respectively);
• Wellhub (formerly Gympass);
• Childcare assistance

For your professional development:

• Education assistance;
• Self Learning (assistance with courses, certifications, and languages);
• Self Friday (Friday afternoon free for studies and self-care).

And there's more!

• Mercado Tech (monthly discount on Ambev products *only in the cities of our units);
• Brahma Express (20% discount on the platform);
• Birthday day off;

Work model

Currently, our work models are hybrid and remote formats, varying according to the type and scope of the position. In the hybrid model, work can be performed at one of our units with a frequency of 3 days per week. In the remote model, work can be performed in any city in Brazil (permanent residence in national territory is required).

Benefits of the remote work model:

• Initial Home office assistance (to support setting up your space);
• Monthly Home Office assistance;