Purpose of role

Define, assess, monitor, and report on compliance with technology and cyber control requirements. Support Policy Key Control (PKC) assessments and reviews, and drive compliance readiness and remediation programs.

 

Key Responsibilities

Lead and support monitoring of Regulatory ITGC Compliance Programs (SOx & ICOFR). Identify IT application controls (ITACs) and automation opportunities. Assist with PKC reviews and remediation tracking. Conduct technical compliance reviews using industry best practices. Evaluate design and effectiveness of compliance controls for assigned systems. Facilitate remediation for gaps and issue professional review reports. Identify improvement areas and advise on IT assurance and compliance programs. 

 

Experience and Qualifications

5+ years in technology compliance or risk assurance (Enterprise, IT, OT) or consulting. Big Four experience preferred.Strong documentation and multitasking skills; ability to prioritize.SOx 404 / ICOFR (ITGC) experience essential. University degree in Computer Science, Information Systems, Cyber Security, or related field. SAP and/or SaaS compliance experience required. Assurance program development experience. At least one certification: CISA, CISSP, CRISC, CISM, CGEIT (or in progress). Knowledge of frameworks: COSO, COBIT, ITIL V3, ISO 27001/27017/27005, NIST, SOC2. Excellent English communication skills; Portuguese fluency required. 

 

Competencies

Strong IT skillset and risk-based thinking. Ability to balance business risk with pragmatic IT controls. Excellent interpersonal and communication skills. Passion for learning and professional development. 

 

Why Ardagh

Purpose-driven: sustainability and innovation. Global exposure and career growth. Competitive compensation and benefits aligned to Brazil market. Inclusive and collaborative culture.