Senior GRC Security Specialist

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Oversee and improve the Cybersecurity Risk Management Process

• Proactively identify, document, and assess control weaknesses and unresolved or significant vulnerabilities from various sources

• Manage the Risk Registry

• Provide prompt risk treatment updates and reports to stakeholders

• Conduct annual third-party cybersecurity risk assessments in alignment with internal risk standards and external compliance obligations

• Enhance and maintain the cybersecurity control framework

• Map existing controls and gather evidence of their implementation

• Detect gaps and inconsistencies

• Integrate overlapping requirements into a cohesive structure

• Ensure compliance with HITRUST, HIPAA, and Spain ENS certification standards

• Develop and maintain cybersecurity-related policies and procedures

• Ensure documentation meets regulatory and contractual requirements

⛳️ Requirements

• Residing in Brazil

• Proficient in English for effective communication with international clients

• Strong communication skills, capable of collaborating effectively with both technical and non-technical stakeholders

• Excellent analytical and problem-solving abilities, with a capacity to make informed decisions in high-pressure scenarios

• Competence in conducting cybersecurity risk assessments, identifying potential vulnerabilities, and recommending risk mitigation strategies

• Ability to work collaboratively with cross-functional teams to ensure that GRC policies, procedures, and controls are effectively communicated and implemented

• Experience leading initiatives to maintain and update documentation related to GRC processes, including risk assessments, policies, and procedures

• Capability to participate in internal and external audits, offering support and documentation to demonstrate compliance

• Strong knowledge of GRC frameworks, industry standards, and regulatory requirements

• Exceptional analytical skills and attention to detail

• Ability to work autonomously as well as within cross-functional teams

🏝️ Benefits

• Health and dental insurance

• Meal and food allowance

• Childcare support

• Extended paternity leave

• Partnerships with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass

• Profit Sharing and Results Participation (PLR)

• Life insurance

• Continuous learning platform (CI&T University)

• Discount club

• Free online platform focused on physical, mental, and overall well-being

• Courses on pregnancy and responsible parenting

• Collaborations with online learning platforms

• Language learning platform

• Inclusion support and accommodations during the recruitment process

• Dedicated Health and Well-being team, inclusion specialists, and affinity groups