Cybersecurity Coordinator

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Take charge of identity and access governance, which encompasses the joiner/mover/leaver lifecycle and certifications in SailPoint, RBAC, segregation of duties (SoD), least privilege, and access management within Google Workspace and AWS IAM.

• Oversee non-human identities and privileged access, which includes inventory management, assignment of ownership, lifecycle oversight, credential rotation, and conducting recurring reviews.

• Spearhead N8N automations for provisioning, approvals, notifications, and integrations across SailPoint, Google Workspace, AWS, and HR/ITSM systems.

• Generate governance metrics and reports, presenting them to the CISO and leadership team.

• Provide technical guidance to the Analyst team by establishing priorities, defining technical standards, reviewing deliverables, offering feedback, and fostering team development.

• Maintain the information security governance framework and lead efforts in information security and third-party risk management.

• Manage business continuity processes, including BIAs, continuity and recovery plans, regular testing, and documenting lessons learned, in accordance with ISO 22301.

• Oversee compliance and audit activities as well as regulatory readiness related to ISO 27001, ISO 22301, and Central Bank regulations; manage controls, evidence, responses, and findings until closure.

⛳️ Requirements

• Practical experience in identity and access management utilizing SailPoint (IdentityIQ or Identity Security Cloud), advanced administration in Google Workspace, and AWS IAM (policies, roles, federation/SSO).

• Comprehensive understanding of non-human identities, including service accounts, API keys, tokens, secrets, and workload identities; inventory management, ownership assignment, credential rotation, and secure deactivation.

• Experience in managing privileged access and administrative accounts, focusing on least privilege, separating administrative and personal accounts, just-in-time access, break-glass accounts, monitoring, and conducting periodic privilege reviews.

• Strong grasp of access concepts (RBAC/ABAC, SoD, SSO, SAML/OIDC, SCIM, MFA) and familiarity with N8N automation (or similar platforms), REST APIs, webhooks, and JSON.

• Capability to articulate risks and outcomes at an executive level to the CISO, committees, and business stakeholders.

• Documented experience in information security governance, risk, and compliance (GRC), including policies, standards, controls, and both internal and external audit cycles.

• Background in managing business continuity, encompassing BIAs, business continuity and disaster recovery plans (BCP/DR), as well as test execution.

• Knowledge of relevant frameworks and regulations (ISO 27001, ISO 22301, and Central Bank regulations).

• Experience in providing technical leadership to teams, including setting priorities, evaluating analysts’ work, giving feedback, and supporting professional growth.

• Preferred: experience in managing access to internal AI systems.

• Preferred: certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor, ISO 22301, SailPoint, or AWS Security Specialty.

• Preferred: experience with PAM, secrets management, and infrastructure as code (IaC), such as Terraform, applied to IAM.

• Proficient in English for technical reading and effective communication with vendors.

🏝️ Benefits

• Competitive salary that aligns with market standards.

• Fully remote work — you are part of the team, no matter your location!

• Monthly home office allowance provided through the RecargaPay app.

• Comprehensive health and dental insurance with no copayment required.

• Life insurance coverage.

• Flexible meal voucher accessible via Flash.

• TotalPass to promote your health and well-being.

• Commitment to diversity and inclusion: an environment where you can be yourself, valuing diverse perspectives and experiences.