We are looking for an IT Internal Auditor
The IT Internal Auditor position will provide services to both Mexico and Colombia; therefore, the incumbent must become familiar with and adhere to the regulatory frameworks applicable in both jurisdictions in the performance of their duties, ensuring that all audit activities, workpapers, and reports comply with the requirements of each country's regulations and supervisory guidelines, and keeping abreast of any regulatory changes that may affect the scope or execution of their work.
The auditor supports the execution of the Annual Internal Audit Plan, which includes mandatory reviews under the General Provisions applicable to credit institutions issued by the CNBV, Banco de México requirements related to SPEI and associated matters, PCI/DSS standards and Colombian regulation, providing operational support in substantive and compliance testing, information gathering, documentation of findings, and follow-up on recommendations. The role also involves contributing to analyses, reports, and materials presented to the Audit Committee, as well as assisting in responding to requirements from external auditors, regulators, and inspection visits by supervisory authorities, providing documentary and operational support to the IT Audit teams of both locations.
Challenges that await you:
- Provide support and expertise in designing, proposing, and executing audit plans for IT, Information Security, BCP, DRP, payment systems, PCI/DSS, and related areas, for approval by the Deputy Director of Internal Audit
- Execute the IT audit process with a comprehensive risk-based approach: performing tests, documenting audit activities, drafting preliminary conclusions, conducting risk assessments of identified findings, presenting and discussing drafts, preparing reports, confirming observations, following up through completion, and monitoring compliance with the Annual Internal Audit Plan, all in accordance with Banco Plata's Internal Audit Manual
- Conduct risk-based audits, including control testing, documentation, issue identification, risk assessment, reporting, and follow-up through full resolution
- Draft and present conclusions, validate observations, and monitor compliance
- Identify and report deficiencies in regulatory compliance and internal control
- Stay current with applicable regulations and ensure the timely escalation of potential risks
- Provide guidance on IT regulatory compliance during new technology projects, while maintaining independence and objectivity
- Assess risk mitigation strategies for new systems and process changes
- Actively participate in and support regulatory audits and inspections conducted by the CNBV, Banxico, IPAB, and other authorities
- Coordinate internal responses and required documentation during regulator visits and follow-up processes.
What makes you a great fit:
- A minimum of 4 years of experience in an internal audit role within the banking sector, preferably in dynamic or technology-focused environments
- Experience with regulatory inspection visits is valued
- Hands-on audit or assessment experience in the following areas:
◦ Core banking and credit systems
◦ Technology risk and IT governance
◦ Information Security, Cybersecurity, and biometrics
◦ Business Continuity and Disaster Recovery Planning (BCP/DRP)
◦ AML systems and automated controls
◦ Acquiring network and digital payments
◦ SPEI-SPID platforms, PCI/DSS
- Strong knowledge of regulatory compliance, internal controls, and IT audit methodologies
- Excellent written and verbal communication skills, with the ability to build effective professional relationships across multicultural IT teams and vendors
- An intermediate level of English (spoken and written) is required
Our ways of working
- Innovative Spirit: A commitment to creativity and groundbreaking solutions
- Honest Feedback: valuing open, transparent communication
- Supportive Team: a strong, collaborative community
- Celebrating Achievements: recognizing our wins together
- High-Tech Environment: a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances
