IT Compliance Analyst

MTP Brasil

Analista de Compliance de TI focado em validação de controles e aplicação de padrões de compliance da PwC. Atuando em projetos em mais de 21 países com responsabilidades em auditorias e gestão de riscos.

Posted 6/16/2026full-timeRemote • BrasilMid-LevelSeniorWebsite

About the role

Key responsibilities & impact

You will be a key member of the ATE Compliance Program, reporting directly to the Compliance Program Lead.
Your primary focus will be to develop a deep understanding of PwC's compliance standards and support teams in their correct application.
This role is centered on control validation, ensuring controls are well designed and operating effectively across ITGC, ISP and QMS domains.
You will be responsible for testing controls, reviewing evidence, facilitating audits, responding to requests, supporting escalations, and contributing to the evolution of controls.
Testing and validation of ITGC controls (primary focus).
Test and validate that ITGC controls are appropriately designed and operating as expected in the following areas: Access Controls, System Development and Change Management, Cybersecurity and Data Protection, and Service Management.
Validate controls related to: Identity and Access Management, Change Management, Cybersecurity Operations, and Database and Network Controls.
Facilitate audits and manage compliance evidence.
Support the handling of inquiries and escalations related to controls.
Contribute to discussions on control design and improvement.
Support remediation processes and continuous monitoring.
Interact with stakeholders and areas involved in the program.
Support communication of compliance and risk topics.
Prepare reports, metrics and data-driven analyses.
Support reviews of policies, procedures and access.

Requirements

What you’ll need

Knowledge of control frameworks such as SOC 2, ISO 27001, 7216 and ISP.
Experience with ITGC and QMS control testing methodologies (walkthroughs, sampling, re-performance, inspection).
Practical knowledge of information security policies (ISP) and control frameworks.
Proficiency in Microsoft Office, evidence management platforms, GRC tools and compliance dashboards.
Knowledge of: Access control systems, Identity management, Encryption standards, Change management processes, Familiarity with global and local regulatory requirements and quality management systems.
Risk-oriented mindset, with the ability to identify and escalate operational and compliance risks.
Familiarity with vulnerability scanning tools, penetration testing (pentest) and security monitoring.
Preferred: CISA (Certified Information Systems Auditor), CRISC (Certified in Risk and Information Systems Control), ISO 27001 Lead Auditor, ISO 42001 or QMS-related certifications, and certifications or trainings specific to ITGC.

Benefits

Comp & perks

Health insurance;
Dental insurance;
Meal allowance;
Food allowance;
Mobility allowance;
Cultural allowance;
Wellness allowance;
Education allowance;
Life insurance;
Childcare assistance;
Discounts with partner companies.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

control validationITGC testingQMS control testing methodologiesAccess ControlsIdentity and Access ManagementChange ManagementCybersecurity OperationsDatabase ControlsNetwork Controlsevidence management

Soft Skills

risk-oriented mindsetstakeholder interactioncommunication of compliance topicsdata-driven analysisfacilitation of auditssupporting escalationscontributing to control designremediation supportcontinuous monitoring

Certifications

CISACRISCISO 27001 Lead AuditorISO 42001QMS-related certifications