Information Security Specialist

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Identify opportunities to proactively reduce moderate to significant cybersecurity risks.

• Manage the analysis of threats or targets related to cyber defense information and create threat intelligence within the organization.

• Conduct risk assessments when applications or systems experience major modifications.

• Capture security controls to incorporate security into processes, enhancing software security while minimizing disruption.

• Supervise detective, protective, or corrective actions when cybersecurity incidents are identified.

• Take ownership of audit actions or regulatory requests by providing timely responses and evidence.

• Showcase the importance of IT security throughout the organization.

• Develop, review, and revise security policies, procedures, standards, and guidelines.

• Serve as the Subject Matter Expert (SME) and primary security contact for IT teams requiring intermediate to advanced security guidance.

• Engage in architectural discussions regarding all company technology platforms.

⛳️ Requirements

• Independently conduct intermediate to advanced technical analyses of medium to high cybersecurity risks.

• Analyze and define security requirements for company systems and networks.

• Provide recommendations on safeguarding complex information systems to maintain confidentiality, integrity, and availability.

• Independently execute security testing and conduct high-complexity security risk assessments following best practices.

• Manage and act as a subject matter expert for the company's security and technology platforms.

• Analyze critical security breaches and incidents.

• Participate in architectural discussions concerning the company's technology platforms.

• Document corporate security policies.

• Identify, evaluate, document, and communicate data security and data privacy risks, countermeasures, and controls.

• Conduct third-party data security risk assessments, project security assessments, business risk assessments, and security testing.

• Perform both technical and non-technical risk and vulnerability assessments across computing environments, networks, infrastructure, and applications.

• Design processes to adhere to legal and regulatory security compliance requirements.

• Lead improvements in the process for detecting and responding to cybersecurity incidents and events.

• Review, approve, and ensure the implementation of complex security configurations.

• Participate in audits of cybersecurity programs and projects; track findings and recommendations.

• Build relationships with local and global business and IT stakeholders.

• Lead cross-functional projects involving local and global teams.

• Influence business and IT teams to develop solutions for complex challenges.

🏝️ Benefits

• A competitive salary and performance-based bonuses.

• Comprehensive benefits package.

• Flexible work arrangements (remote and/or office-based).

• You will also enjoy a dynamic and inclusive work culture within a globally renowned group.

• Private Health Insurance.

• Paid Time Off.

• Training & Development opportunities in partnership with renowned companies.

• A solid and innovative company with a strong market presence.

• A dynamic, diverse, and multicultural work environment.

• Leaders with deep market knowledge and strategic vision.

• Continuous learning and development.