Internal Auditor

Description

**About the position** ****We are seeking an Internal Auditor to work independently in the third line of defense at SPC Grafeno, assessing the effectiveness of internal controls, governance processes, risk management, and regulatory compliance of the company. This position will play a strategic role in strengthening the control environment, ensuring adherence to applicable regulations for the Financial Market Infrastructure (FMI) segment, regulated and supervised by the Central Bank of Brazil and the Securities and Exchange Commission (CVM). **Responsibilities and duties** * Plan and execute internal audits focused on operational, regulatory, financial, technological, and governance processes. * Assess the effectiveness of internal controls and compliance with policies, internal standards, and regulations applicable to the Financial Market Infrastructure (FMI) segment. * Develop risk-based audit programs, considering regulatory requirements from the Central Bank, CVM, and other applicable regulations. * Identify control weaknesses, operational, regulatory, and compliance risks, proposing recommendations for mitigation. * Issue executive audit reports containing findings, risk classifications, action plans, and follow-up on remediation efforts. * Work independently with business units, technology, operations, risk, compliance, and information security teams. * Perform tests of compliance, effectiveness, and design of controls related to the company's critical processes. * Support external audits, regulatory inspections, and requests from regulatory authorities. * Monitor implementation of action plans defined by audited areas. * Contribute to strengthening the internal control culture, enterprise risk management, and corporate governance. * Evaluate processes related to business continuity, information security, data protection, and third-party management. * Participate in developing and refining the annual risk-based audit plan. * Perform other activities as required or requested by the area manager, to support achievement of the company’s goals and objectives. **Requirements and qualifications** **Academic background** * Bachelor’s degree completed in Business Administration, Accounting, Economics, Law, Information Technology, or related fields. **Professional experience** * Prior experience in Internal Audit, Internal Controls, Compliance, or Risk Management, preferably within financial institutions, fintechs, regulated entities, or Financial Market Infrastructures (FMI). * Experience conducting risk-based audits, evaluating internal controls, preparing executive reports, and interacting with regulatory, technology, and business areas. * **Behavioral skills** * Strong interpersonal skills for collaboration across diverse departments and stakeholders. * Clear and concise communication. * Analytical mindset and critical thinking for risk and control evaluation. * Organizational and planning abilities for conducting audits and tracking action plans. * Proactivity and autonomy in managing tasks. * Ethics, confidentiality, and strong sense of responsibility. * Ability to influence and build relationships across all organizational levels. * **Preferred qualifications** * Experience with entities regulated by the Central Bank and/or CVM. * Experience in Financial Market Infrastructure (FMI), registrars, financial markets, or capital markets. * Knowledge of COSO, COBIT, ISO 31000 frameworks and enterprise risk management. * Certifications such as CIA, CCSA, CRMA, ISO 27001, COBIT, or related credentials. * Knowledge of information security, business continuity, and operational risk. **Additional information** Meal Allowance, paid via Swile card; DIY Allowance, paid via Swile card; Remote Work Allowance, paid via Swile card; Transportation Benefit, paid via Swile card; Childcare Assistance; Bradesco Health Plan; Bradesco Dental Plan; Life Insurance; Day Off \- during your birth month; Vittude: mental health support platform; TotalPass: extensive network of gyms. SPC Grafeno was founded in September 2019 with a clear mission: to bring greater dynamism, security, and competitiveness to the Brazilian financial market. As a joint venture formed by the union of Grafeno Digital — an innovative fintech specializing in simplifying financial processes — and Serviço de Proteção ao Crédito (SPC Brasil) — a platform with over 60 years of experience in data analytics for credit decisions — we have created a unique infrastructure for lenders in Brazil. **Our value proposition goes beyond legal requirements.** We combine the best capabilities of SPC Brasil and Grupo Grafeno to manage your regulatory processes with excellence. We offer more than asset registration and recordkeeping; **we bring intelligence, security, and agility to our lenders’ decision-making**, delivering a comprehensive experience — from fulfilling regulatory requirements to banking solutions.