Senior Cyber Risk Specialist

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Assist in the development and enhancement of Cyber Risk Management frameworks and methodologies.

• Identify, analyze, and evaluate various cyber risk scenarios.

• Perform inherent and residual risk assessments.

• Evaluate the design and maturity of security controls.

• Facilitate Risk Acceptance, Exception Management, and Risk Treatment processes.

• Create and oversee Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), Risk Registers, and dashboards.

• Support Cyber Risk assessments concerning vendors and third parties.

• Link cyber risks to Technology, Privacy, Resilience, and Operational Risk.

• Conduct interviews and workshops with both technical and business stakeholders.

• Prepare risk reports and presentations tailored for executive audiences.

• Engage in an international project, collaborating with technical and business stakeholders in a global context.

⛳️ Requirements

• Proven experience in Cyber Risk, Information Security Risk, Technology Risk, or related fields.

• Strong understanding of Risk Management methodologies.

• Demonstrated experience in identifying and assessing cyber risk scenarios.

• Experience in conducting inherent and residual risk assessments.

• Proficiency in assessing the design and maturity of security controls.

• Ability to interpret vulnerabilities and technology risks into potential business impacts and actionable recommendations.

• Excellent communication skills with both technical and non-technical stakeholders.

• Advanced or fluent proficiency in English.

• Experience with Third-Party or Vendor Cyber Risk is a plus.

• Familiarity with Risk Acceptance, Exception Management, and Risk Treatment Plans is advantageous.

• Knowledge of KRIs, KPIs, Risk Registers, and dashboards is beneficial.

• Experience related to Technology, Privacy, Resilience, or Operational Risk is an added advantage.

• Relevant certifications such as CRISC, CISSP, CISM, CISA, or certifications associated with ISO 27001 are a plus.

🏝️ Benefits

• Medical and dental insurance.

• Childcare assistance.

• EY benefits and exclusive discounts platform.

• Education incentives.

• Birthday day off.

• Gympass/Wellhub.

• Profit-sharing program (PLR).

• Private pension plan.

• Meal and/or food and transportation vouchers.

• Flexible work environment.

• Diverse and inclusive culture.

• Diversity and equity programs and employee groups.

• Development focused on future-ready skills.

• World-class experiences.