Analista de Segurança da Informação

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Lead the implementation of compliance with the General Data Protection Law and maintain the adopted controls.

• Create and maintain an Inventory and Data Flow.

• Map the flow of personal data processing and establish this as a practice within the involved areas.

• Ensure adequate requirements and controls for data processing according to the legal privacy bases.

• Support requests from clients, suppliers, regulators, and other stakeholders regarding privacy and data protection.

• Assist with responses to requests from data subjects and regulatory bodies.

• Ensure the cooperative's structure complies with the General Data Protection Law.

• Advise internal teams on data protection and privacy during the development or execution of services.

• Support the Incident Response Plan in privacy-related incidents.

• Conduct analyses, diagnostics, and risk management related to personal data processing.

• Assist in the development and implementation of a Privacy and Data Protection awareness program.

• Aid in the privacy and data protection compliance assessment of suppliers.

• Support the preparation and maintenance of the Privacy Impact Assessment Report.

• Help maintain the data protection policy and adapt internal and external documents.

• Establish processes for monitoring, reviewing, and evaluating the effectiveness of privacy practices.

• Develop, monitor, and present reports and indicators regarding the effectiveness of LGPD controls.

• Review privacy and data protection requirements in new products and initiatives, applying privacy by design principles.

• Execute other related activities as requested by leadership.

⛳️ Requirements

• Bachelor's degree in exact sciences, preferably in Information Security, Compliance, Technology with a focus on Data Governance, or related fields.

• Strong knowledge of Privacy and Data Protection, as well as the General Data Protection Law.

• Understanding of Information Security and Data Governance.

• Experience in managing data protection topics for compliance with legislation and/or regulations.

• Experience in developing policies, standards, and business processes focused on privacy and data protection.

• Excellent oral and written communication skills, engagement, and proactivity.

• Postgraduate degree in information technology or law is desirable as a differentiator.

• Intermediate English proficiency is desirable as a differentiator.

• Familiarity with ISO 27701 and ISO 29100 standards is desirable as a differentiator.

🏝️ Benefits

• Additional Service Time compensation.

• Postgraduate Assistance.

• Educational Discounts.

• Cresol Corporate University.

• Birthday Day Off.

• Parent Bonus.

• Baby Kit.

• Wedding Assistance.

• Christmas Assistance.

• Health insurance with a monthly fee fully covered by Cresol.

• Dental plan with a monthly fee fully covered by Cresol.

• Incentive for Physical Activity, including gym memberships, yoga, and meditation.

• Workplace Gymnastics.

• Blood Donation Incentive.

• Cresol Welcomes: free online therapy sessions for you and up to two dependents.

• Life insurance, including coverage for critical illnesses.

• Cresol Longevity.

• Private Pension.

• Recognition Award.

• PPR (Profit Sharing Program).

• Meal and/or Food Voucher.

• Childcare Assistance for children up to 7 years old.

• School Material Assistance for children up to 11 years and 11 months.

• Transportation Voucher.

• Flexible Vacation, with the option to divide vacations into up to three periods.

• Pet Leave of 2 days.

• Extended Maternity Leave.

• Extended Paternity Leave, with an additional 5 days.

• Special support for parents of children with disabilities.

• Justified Absence of up to 5 days per year for parents of children with disabilities.

• Bereavement Assistance.

• Funeral Assistance.

• Mourning Leave with an additional 3 business days.

• Uniform.