Cloudwalk is actively hiring for Security roles. Visit the company page to see all open positions and learn more about working at Cloudwalk.

Internal Control Specialist – Focus on IT Processes, Risks and Controls

Cloudwalk São Paulo 3 days ago

security

About CloudWalk:

We are not just another fintech unicorn. We are a pack of dreamers, makers, and tech enthusiasts building the future of payments. With millions of happy customers and a hunger for innovation, we're now expanding our neural network - literally and metaphorically.

Compliance at CloudWalk is a strategic, multidisciplinary team that connects regulatory

knowledge, technology, and risk intelligence. We partner with Engineering, Product, Operations, and Finance to ensure that bold innovation happens in a controlled, secure, and sustainable way.

The Internal Control area safeguards CloudWalk’s operational and technological resilience.

We assess risks, evaluate controls, design governance mechanisms, and ensure the company operates with consistency, reliability, and compliance.

As CloudWalk continues to scale, strengthening Internal Controls for technology, systems, and data pipelines is essential — and that is where this role fits

What You Will Be Doing

As an Internal Control Specialist focused on IT processes, risks, and controls, you will play a hands-on role evaluating, testing, documenting, and improving the internal control environment across CloudWalk’s technology ecosystem. You will work closely with Engineering, Cybersecurity, Product, Data, and Operations to ensure our systems are robust, compliant, and built for scale.

1. IT Control Testing & Monitoring

Execute design and operating effectiveness testing forIT General Controls (ITGCs), including:

Access management, Change management, Logical security, Backup and recovery, Job scheduling and batch processing, IT operations processes

Evaluate system configurations, control evidence, and logs to ensure controls function as

intended.

Track deficiencies and validate remediation activities.

2. IT Risk & Control Assessments

Support control assessments of key systems, applications, and infrastructure components.

Map technical processes, identify risks, and evaluate control adequacy.

Assist in assessing risks related to:

Cloud infrastructure, APIs and integrations, Data flows and data governance, Third-party service providers, System reliability and operational resilience

Help ensure assessments align with Internal Control frameworks, CloudWalk’s environment, and regulatory expectations.

3. Technology Process Documentation

Document IT processes, controls, workflows, and system dependencies.

Maintain updated IT control matrices and ensure alignment with system or architectural

changes.

Support version control and documentation governance with Engineering teams.

4. Incident & Deficiency Analysis (IT Focus)

Assist in analyzing control-related IT incidents, outages, or process failures.

Support root cause analysis focusing on technology or control design issues.

Ensure corrective actions strengthen the underlying IT control environment.

5. Collaboration with Engineering & Security

Work closely with Engineering squads, SRE, DevOps, and InfoSec to embed control requirements into technical processes.

Support the adoption of automation and tooling to improve control reliability.

Help promote secure development practices, change governance, and system integrity.

6. Governance, Reporting, and Continuous Improvement

Assist in preparing dashboards, metrics, and reports on IT control health.

Monitor remediation plan progress and systemic trends.

Identify opportunities for control automation, continuous monitoring, and smarter testing

approaches

What You Need to Succeed

Bachelor’s degree in Information Systems, Engineering, Computer Science, or related

fields.

Experience withIT controls, IT risk, internal controls, audit, cybersecurity, or

technology governancewithin fintechs or financial institutions.

Experience withSOX environments, ITGC testing, and SOX documentation

standardsis a strong advantage.

Familiarity with control and risk frameworks such as:

COSO, COBIT, ISO 27001, NIST CSF, ITIL

Technical Skills

Understanding of ITGCs, SDLC, DevOps practices, infrastructure (cloud-native), databases, and API-driven architectures.

Ability to evaluate log evidence, system configurations, access controls, and change management processes.

Strong documentation and analytical skills.

Experience working with Jira, Confluence, Git, cloud platforms, or monitoring tools is a bonus

The Future We See

As CloudWalk builds an AI-powered financial ecosystem, the Internal Controls function will evolve toward:

Automated control monitoring

AI-based anomaly detection

Integration of controls into CI/CD pipelines

Predictive identification of technology risks

Control-by-design embedded in engineering workflows

This role is ideal for someone who thrives at the intersection oftechnology, risk, and

governance, and who wants to help shape the future of a fast-scaling fintech

Join us at CloudWalk, where we’re not just engineering solutions; we’re building a smarter, AI-driven future for payments—together.

By applying for this position, your data will be processed as per CloudWalk's Privacy Policy that you can read here in Portuguese and here in English.