Analista de Governança – Segurança da Informação SR

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Lead maturity assessments in cybersecurity and gap mapping using leading market frameworks.

• Translate purely technical metrics and risks into accessible corporate and executive language, directly supporting decision-making for senior leadership.

• Evaluate compliance and the practical effectiveness of technical security controls in both Cloud and On-premise environments, engaging deeply and based on evidence (moving beyond superficial questionnaires).

• Support the entire risk management cycle by developing robust treatment recommendations and structuring formal approval workflows (including formalizing risk acceptances with conditions and technical comments).

• Create, review, and update information security policies, standards, and procedures, ensuring they are practical and aligned with the realities of business areas.

• Develop, monitor, and report on performance indicators (KPIs) and risk indicators (KRIs) that demonstrate the actual and mature evolution of security within the company.

• Assist in the development of materials, educational content, and conduct internal training sessions to raise employee awareness on Information Security topics.

⛳️ Requirements

• Proven, robust, and practical experience in IT Governance, Risk Management, Compliance, or Cybersecurity at senior levels.

• In-depth practical knowledge of the **ISO/IEC 27000** family of standards (with mandatory focus on **27001, 27002, 27005, and 27701**).

• Solid understanding of the **NIST CSF** framework for structuring profiles and maturity journeys.

• Strong analytical skills to conduct audits and manage vendor risks, strictly based on controls and technical evidence, rather than solely theoretical aspects.

• Excellent communication skills (both oral and written), with a proven ability to adapt highly technical discourse for non-technical audiences and executive committees.

• A critical and process-oriented perspective to propose improvements that balance security, compliance, and productivity for business areas.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Opportunities for professional development and training.

• Flexible work arrangements and a supportive work environment.