Audit and Controls Analyst
Job Description
DXC Technology helps global enterprises run mission-critical systems and operations while modernizing IT, optimizing data architectures, and ensuring security and scalability across public, private and hybrid clouds. With decades of driving innovation, the world's largest companies trust DXC to deliver new levels of performance, competitiveness and customer experiences. Learn more about the history of DXC and our focus on people, customers and operational execution at www.dxc.technology .
Responsibilities: We are seeking an Audit, Compliance & Controls Analyst to support governance, risk, compliance, and control assurance activities across Identity and Infrastructure environments. This role is responsible for assisting with audit readiness, control validation, regulatory compliance activities, and remediation tracking while ensuring adherence to security and governance standards. The ideal candidate will have experience supporting internal and external audits, managing compliance evidence, monitoring control effectiveness, and partnering with technical teams to address identified gaps. Strong documentation, analytical, and communication skills are essential. Advanced English communication skills are required, as the role involves interaction with global teams, audit stakeholders, and documentation in English.
- Support audit and compliance activities related to Identity and Infrastructure controls.
- Collect, review, and maintain audit evidence, including SOX and regulatory compliance documentation.
- Assist with control testing activities and validation of remediation plans.
- Track audit findings, control deficiencies, and corrective actions through closure.
- Monitor compliance with security policies, standards, and governance requirements.
- Prepare compliance reports, metrics, and management updates.
- Work closely with Identity Management, Infrastructure, Security, Risk, and Audit teams.
- Maintain accurate documentation of processes, controls, and operating procedures.
- Support continuous improvement initiatives focused on strengthening control effectiveness and regulatory compliance.
- Participate in risk assessments and governance reviews related to access management and infrastructure operations.
Required Skills
- Bachelor's degree in Information Technology, Information Security, Computer Science, Audit, Risk Management, or a related field.
- Experience supporting audit, compliance, risk, or control assurance activities.
- Understanding of Identity and Access Management (IAM) concepts and infrastructure governance.
- Experience with SOX compliance, audit evidence collection, or control testing activities.
- Knowledge of security controls, access management processes, and regulatory requirements.
- Strong analytical, organizational, and documentation skills.
- Ability to manage multiple priorities and collaborate with cross-functional teams.
- Advanced English communication skills (written and verbal).
- Previous experience in Information Security, Infrastructure Governance, Risk, or Compliance functions.
- Familiarity with frameworks and standards such as: • SOX
- ISO 27001
- NIST
- COBIT
- IT General Controls (ITGC)
- Professional certifications such as: • CISA
- CRISC
- ISO 27001 Foundation/Auditor
- Security+ (desirable)
- Excellent organizational and documentation skills.
- Ability to work effectively in a global and collaborative environment.
- Commitment to quality, compliance, and continuous improvement.
Language Requirement English: Advanced/Fluent (mandatory) Ability to participate in meetings, prepare documentation, and communicate effectively with international stakeholders. •
Belo Horizonte-MG
Not included in the source posting: about the role, what you'll do, qualifications, benefits.
Skills
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.