Mid-level Information Security Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Develop, implement, and enhance processes for cybersecurity governance;

• Establish, maintain, and review policies, standards, and procedures for information security;

• Manage cyber risks by identifying, assessing, treating, and monitoring them;

• Organize and improve processes related to: Vulnerability Management, Security Incident Management, Asset Management, and Compliance Management;

• Ensure compliance with essential security frameworks and best practices, including ISA/IEC 62443 and NIST;

• Define, monitor, and report on performance and risk indicators (KPIs and KRIs);

• Prepare both technical and executive reports to track security maturity and associated risks.

⛳️ Requirements

• Proven experience with policies, standards, audits, and compliance processes in Information Security;

• Understanding of security frameworks and standards such as NIST, ISO 27001, and ISA/IEC 62443 (preferred);

• Familiarity with security tools including SIEM, EDR, and security monitoring platforms;

• Excellent communication skills, analytical thinking, and business acumen;

• Capability to engage with technical teams and various business sectors.

🏝️ Benefits

• 100% remote work based on the contract model;

• A strong commitment to fostering diversity and inclusion.