Information Security Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Assist in Information Security Governance, Privacy, and Risk Management activities.

• Aid with assessments, diagnoses, and follow-ups on action plans.

• Support initiatives related to Brazil's General Data Protection Law (LGPD), as well as internal policies and regulatory requirements.

• Contribute to the creation and updating of policies, procedures, metrics, and reports.

• Help manage vendor relationships and coordinate the department's administrative requests.

• Engage in organizing and delivering information security awareness campaigns and training sessions.

• Facilitate collaboration between business and technology teams in the implementation of controls and enhancements.

• Monitor, document, and record the processes of the department.

⛳️ Requirements

• Bachelor’s degree in Information Technology, Information Systems, Information Security, Business Administration, Law, or a related discipline.

• Understanding of Information Security, Governance, Compliance, Risk Management, or Privacy.

• Eagerness to learn about Brazil's General Data Protection Law (LGPD), information security standards, and best practices.

• Familiarity with frameworks or standards such as ISO 27001, NIST, COBIT, or similar guidelines.

• Excellent communication and organizational skills, with the ability to work effectively as part of a team.

• Analytical mindset, collaborative spirit, and dedication to continuous learning.

• Completion of courses or certifications in Information Security, LGPD, or Governance is advantageous.

• Relevant academic experience, internships, or entry-level experience in related fields is a plus.

• Basic knowledge of audits, compliance, or risk management is beneficial.

• Involvement in security and privacy projects, training, or awareness initiatives is a plus.

• Familiarity with management tools, controls, or process documentation is advantageous.

🏝️ Benefits

• Opportunities to enhance knowledge of processes, controls, regulatory compliance, and data protection.

• Collaboration with business and technology teams, as well as partners.

• Opportunities to engage in training and awareness initiatives.

• A work environment that values continuous learning, autonomy, and career development.

• A culture founded on transparency, ownership, commitment, continuous improvement, and a focus on sustainable outcomes.