Senior Cybersecurity Resilience Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Incorporate cyber crisis management into incident response protocols.

• Create, uphold, and evaluate business continuity plans (BCPs) and disaster recovery plans (DRPs).

• Execute Business Impact Analyses (BIAs), identifying essential processes, dependencies, and metrics such as RTO, RPO, and MTD.

• Organize, coordinate, and execute tabletop exercises, failover/DR tests, and cyber crisis simulations.

• Facilitate coordination among technical, executive, legal, and communications teams during significant incidents.

• Align security incident response with business continuity strategies.

• Evaluate the resilience of critical architectures, focusing on redundancy, high availability, backup, and failover strategies.

• Manage resilience-related risks involving key vendors and service providers, including cloud service providers, contracts, and service level agreements (SLAs).

• Create, review, and maintain policies, standards, playbooks, and procedures for continuity, recovery, and cyber resilience.

• Assist with internal and external audits and regulatory evaluations by compiling evidence and action plans.

• Generate technical and management reports concerning resilience posture, testing results, gaps, and improvements.

• Collaborate with the SOC, CSIRT, Red Team, and other security divisions to outline threat scenarios.

• Analyze Bacen regulations, PCI-DSS, ISO 22301, and ISO 27001, transforming requirements into actionable controls and plans.

• Track trends, industry incidents, and best practices, recommending ongoing improvements.

• Mentor and train internal teams on resilience, contingency planning, and crisis protocols.

⛳️ Requirements

• Proven experience in business continuity, disaster recovery, crisis management, or operational resilience, preferably related to information security.

• An analytical and organized mindset, with a holistic view for linking dependencies among business processes, technology, and vendors.

• Strong prioritization skills and the ability to act decisively and objectively under pressure, particularly during crisis situations.

• Comprehensive understanding of ISO 22301, NIST SP 800-34, ISO 27001, NIST CSF, PCI-DSS, ISO 27035, and NIST SP 800-61.

• Familiarity with regulations from the Central Bank of Brazil that apply to payment institutions and other authorized entities, including BCB Resolution No. 85/2021, BCB Resolution No. 538/2025, and CMN Resolution No. 5,274/2025.

• Experience in conducting BIAs and simulation exercises, such as tabletop exercises, DR tests, and crisis simulations.

• Background in managing security incidents and collaborating with SOC/CSIRT teams.

• Strong communication skills for engaging technical, executive, and regulatory stakeholders effectively.

• Preferred: experience in financial institutions, fintechs, or environments with stringent regulations.

• Preferred: certifications such as CBCI, CBCP/MBCP, ISO 22301 Lead Implementer/Auditor, CISM, or CRISC.

• Preferred: familiarity with BCM tools and platforms for mass notification/crisis orchestration.

• Preferred: knowledge of Cloud Security and proficiency in AWS, Azure, or GCP.

• Preferred: experience with PCI-DSS, ISO 27001, SOC 2 audits, and Bacen regulations.

• Preferred: skills in Python or PowerShell relevant to resilience testing or automation.

• Standard 8-hour workday, from Monday to Friday.

• CLT employment contract.

🏝️ Benefits

• Comprehensive medical and dental insurance with no copayments.

• Life insurance coverage.

• Medication reimbursement allowance.

• Fitness reimbursement allowance.

• Access to four complimentary therapy or nutritionist sessions monthly through Zenklub.

• Quick massage services available at headquarters.

• Flexible meal allowance provided via a Visa card.

• Complimentary meals available at headquarters.

• Childcare reimbursement.

• Parental support initiatives.

• Extended maternity and paternity leave policies.

• In-house training platform for professional development.

• Education reimbursement covering 70% of undergraduate and language course tuition.

• Allowance for purchasing educational courses and books.

• Home office reimbursement.

• Provision of work equipment.

• Home office furniture reimbursement.

• Partnership with WOBA for coworking space access throughout Brazil.

• Day off during the birthday month.

• Budget for happy hour events.

• Referral bonus for bringing in new hires.

• Annual bonus based on performance.

• Participation in stock option plan.

• Casual dress code policy.