Information Security Specialist I – Cyber Security

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Assist in the Cyber Security Compliance Program

• Evaluate cybersecurity and privacy controls according to various frameworks and regulations

• Aid in compliance initiatives related to SOC 2, NIST CSF, NYDFS, CCPA/CPRA, GDPR, LGPD, and other similar standards

• Gather, assess, and analyze audit evidence

• Record testing outcomes, observations, and remediation suggestions

• Collaborate with IT, Security, and business partners to facilitate compliance efforts

• Liaise with both internal and external auditors

• Monitor audit findings and confirm that remediation tasks are fulfilled

• Generate reports and documentation for management and compliance assessments

⛳️ Requirements

• Evaluate and test cybersecurity and privacy controls in accordance with frameworks and regulations

• Assist in compliance efforts related to SOC 2, NIST CSF, NYDFS, CCPA/CPRA, GDPR, LGPD, and other applicable guidelines

• Gather, assess, and analyze audit evidence

• Record testing outcomes, observations, and remediation suggestions

• Collaborate with IT, Security, and business partners to facilitate compliance efforts

• Liaise with both internal and external auditors

• Monitor audit findings and confirm that remediation tasks are fulfilled

• Generate reports and documentation for management and compliance assessments

• Minimum of 3 years of experience in IT Audit, IT Risk, Information Security, Internal Controls, GRC, or Compliance

• Knowledge of IT General Controls (ITGCs), risk management, and control testing

• Experience in supporting audits and compliance evaluations

• Familiarity with cybersecurity frameworks like NIST CSF, CIS Controls, or SOC 2

• Excellent documentation, communication, and stakeholder management abilities

• Proficient in Microsoft Office 365

• Experience with Big Four firms or consulting

• Familiarity with GRC platforms (Archer, Vanta, or similar)

• Awareness of privacy regulations such as CCPA/CPRA, GDPR, LGPD (for Brazil), or LFPDPPP (for Mexico)

• Experience working directly with external auditors

• Valid, local legal authorization to work in Brazil at the time of hire

• No concurrent employment, professional activities, or paid work for other entities during employment

🏝️ Benefits

• Competitive compensation and benefits package

• Attractive salary with performance-based bonuses

• Comprehensive benefits including grocery vouchers, savings funds, SGMM, etc.

• Opportunities for career development and training

• A dynamic and inclusive work environment within a globally recognized organization

• Private Health Insurance

• Pension Plan

• Paid Time Off

• Training & Development

• Valid, local legal authorization to work in the country where the role is based

• No concurrent employment, professional activities, or paid work for other entities during employment

• Disclosure and formal review of any ownership, partnership, directorship, or involvement in other businesses or companies under conflict-of-interest policies