Senior Information Security Administrator

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Create, implement, and refine information security policies, standards, procedures, and controls.

• Establish and enforce hardening policies for operating systems, servers, applications, databases, network devices, and various technology assets.

• Suggest enhancements to information security, risk management, and corporate asset protection processes.

• Oversee the technology environment to detect threats, vulnerabilities, and unusual activities.

• Examine logs, events, and security indicators to spot incidents and anomalies.

• Perform internal audits and evaluate security maturity and posture.

• Compile technical and executive reports on incidents, risks, vulnerabilities, compliance, and control effectiveness.

• Investigate incidents to determine root causes, impacts, exploited vulnerabilities, and corrective measures.

• Carry out digital forensics investigations for critical incidents.

• Design and implement incident response plans, including containment, eradication, recovery, and lessons learned.

• Organize, coordinate, and execute cyberattack simulation exercises, such as APTs, ransomware, and distributed attacks.

• Evaluate Shadow IT risks and endorse or recommend security technologies and tools.

• Collaborate with infrastructure, development, and operations teams to integrate security requirements and controls.

• Assist in security practices for applications, services, architectures, and secure development processes.

• Conduct assessments and audits in accordance with ISO 27001/27002, CIS Controls, SANS, OWASP, and CNJ regulations.

• Define and analyze indicators, metrics, and KPIs related to information security.

• Engage in technology and information security risk management.

• Formulate and test disaster recovery and business continuity strategies.

• Establish and assess restoration procedures, redundant environments, backups, and alternative mechanisms.

• Identify critical systems and define RTOs and RPOs.

• Plan, implement, and verify operational continuity strategies.

• Conduct tests for contingency, disaster recovery, and business continuity.

• Develop action plans for contingency scenarios.

• Define roles, responsibilities, and response workflows for incidents, contingencies, and continuity events.

• Organize communication workflows for crisis situations.

• Aggregate information from service requests, incidents, vulnerabilities, and security demands.

• Offer technical support and specialized guidance to security, infrastructure, development, and governance teams.

• Act as a technical reference in information security, risk management, business continuity, and disaster recovery.

• Carry out tasks related to information security, digital asset protection, and the continuity of ICT services.

⛳️ Requirements

• Bachelor’s degree in Information Technology or a related field.

• Proven professional experience through employment records or a statement from a public or private institution where the candidate has worked in the specified specialty.

• Experience in critical, high-availability corporate environments.

• ITIL 4 training of a minimum of 12 hours.

• Official ITIL 4 Foundation certification or higher.

• One of the following certifications: ECSA, CySA+, ECIH, or CSIH.

• Extensive experience in Information Security, Risk Management, Incident Response, Forensics, Security Governance, Business Continuity (BCP), Disaster Recovery (DR), Vulnerability Management, and Compliance.

• Familiarity with ISO 27001/27002, CIS Controls, SANS, OWASP, SIEM, SOC, Cloud Security, log analysis, security metrics, and CNJ regulations is considered an advantage.

🏝️ Benefits

• Hapvida, Bradesco, or Unimed health insurance (available based on the region).

• Hapvida Odonto or Bradesco Dental plan.

• Meal or food allowance.

• Life insurance fully covered by Lanlink.

• Transportation allowance.

• TotalPass.

• Pharmacy benefit.

• Partner university benefits.

• Corporate Education Platform.

• Welcome-to-the-World Baby Kit.

• Moodar Platform.

• Preferential vacancy for people with disabilities (PwD).