LGPD, ITIL, or Cybersecurity Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Serve as a consultant for clients on LGPD and cybersecurity initiatives.

• Generate reports and assist clients with compliance efforts.

• Evaluate information security postures and aid in reviewing practices, policies, and processes for LGPD compliance.

• Analyze systems and documentation; conduct analysis, requirements gathering, business rule analysis, process mapping, and data modeling.

• Assess quality standards, the impact of changes, and ensure system integrity.

• Document risks, mitigation strategies, manuals, and operational procedures.

• Assist project teams in identifying and measuring risks while defining action plans.

• Support audits, simulations, and vulnerability assessments.

• Engage in one or more compliance projects or DPO-as-a-Service consulting assignments.

• Communicate with end clients, offering guidance and reports.

• Research, diagnose, plan, test, and analyze processes and data processing activities.

• Train teams and suggest strategies and enhancements.

• Draft and review internal policies and procedures.

• Assist with testing, audits, and configurations.

• Maintain project documentation and the organizational knowledge repository up-to-date.

• Hold regular meetings with the team to provide reports, information, and updates.

• Collaborate with the consulting team to deliver comprehensive guidance.

• Conduct follow-ups and reinforce consulting recommendations.

⛳️ Requirements

• Customer-oriented service mindset.

• Previous experience in similar roles, preferably in LGPD or GDPR projects or cybersecurity Blue/Red Teams.

• Bachelor's degree in Information Technology or a related discipline, along with relevant experience in the field and/or position.

• Experience collaborating with small to medium-sized teams of 2–4 professionals.

• Practical understanding of ISO 27001, ISO 27002, and ISO 27701.

• At least one certification related to privacy, such as EXIN PDPE, EXIN PDPF, EXIN PDPP, EXIN ISFS, or a certification from IAPP, ISC2, or CompTIA.

• Proficiency in technical English.

• Familiarity with privacy management platforms like OneTrust.

• Knowledge of DB2, Oracle, MS SQL Server, or MySQL databases.

• Understanding of Microsoft security tools, including Office 365, DLP, MDM/Intune, and PowerShell.

• Awareness of API security.

• Knowledge of encryption models and their implementation for data at rest.

• Familiarity with both cloud and on-premises environments.

• Experience with vulnerability assessments and penetration testing.

• Proficiency with WAF, DAST, IAST, and RASP tools, in addition to log and traffic monitoring/analysis.

• Knowledge of COBIT, ITIL, or similar frameworks is an advantage.

🏝️ Benefits

• Option for contractor or employee contract (PJ or CLT).

• Remote position.