Mid-level Governance, Risk and Compliance Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Supervise the governance of both internal and external audits, including ISO 27001, PCI-DSS, BACEN regulatory audits, and ITGC/SOX.

• Oversee and monitor action plans aimed at addressing identified non-conformities and gaps.

• Assist in regulatory and normative compliance processes, ensuring alignment with relevant internal and external requirements.

• Create, evaluate, and sustain information security policies, standards, and procedures.

• Work alongside cross-functional teams, including technical and business units, to ensure adherence to internal controls and security governance.

• Engage with other Group entities to synchronize local and global initiatives concerning security control compliance.

⛳️ Requirements

• Familiarity with security standards and frameworks such as PCI-DSS, ISO 27001, and BACEN regulations.

• Proven experience in conducting audits and managing information security controls.

• Background in developing, reviewing, and enforcing security policies and standards.

• Proficient in English and Spanish at an intermediate level, capable of participating in meetings and reading/writing documents.

• Certifications like ISO 27001 Lead Implementer/Lead Auditor, CISA, CISM, CRISC, or PCI ISA are advantageous.

• Knowledge of Cloud Security, particularly Azure, is preferred.

• Experience in implementing cybersecurity best practices and ensuring regulatory compliance is beneficial.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Opportunities for professional development and certifications.

• Flexible working hours and remote work options.

• Comprehensive health and wellness programs.

• Collaborative and inclusive work environment.