Senior Information Security Administrator

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Develop, implement, and enhance information security policies, standards, procedures, and controls in accordance with best practices and institutional requirements.

• Define and enforce hardening policies for operating systems, servers, applications, databases, network devices, and other technological assets.

• Suggest continuous improvements to operational processes related to information security, risk management, and the protection of corporate assets.

• Monitor the technological environment to detect emerging threats, vulnerabilities, and suspicious activities, while proposing and applying mitigation strategies.

• Perform detailed analyses of logs, events, and security indicators to identify incidents, anomalies, and potential compromises.

• Conduct internal information security audits to evaluate the effectiveness of implemented controls and recommend enhancements.

• Carry out periodic assessments of security maturity and posture to identify gaps and opportunities for process and technology improvements.

• Assist in the preparation, review, and updating of information security standards, procedures, and policies.

• Generate technical and executive reports concerning incidents, risks, vulnerabilities, compliance, and security control performance.

• Investigate information security incidents to determine root causes, impacts, exploited vulnerabilities, and corrective actions to prevent recurrence.

• Execute digital forensic analyses of critical incidents to identify attack vectors, technical evidence, event chains, and impacts on the corporate environment.

• Develop and implement security incident response plans, including containment, eradication, recovery, and lessons learned activities.

• Plan, coordinate, and carry out cyberattack simulation exercises, including advanced scenarios like APTs, ransomware, and distributed attacks.

• Evaluate and mitigate risks associated with Shadow IT by identifying unauthorized assets, services, and applications in the corporate environment.

• Assess, validate, and recommend new information security technologies, solutions, and tools while considering technical requirements, risks, and benefits.

• Collaborate with infrastructure, development, and operations teams to integrate security requirements and controls into corporate processes and systems.

• Support the implementation of security practices in applications, services, architectures, and secure development processes.

• Conduct assessments and audits based on ISO 27001/27002, CIS Controls, SANS, OWASP, and CNJ regulations.

• Define, monitor, and analyze information security indicators, metrics, and KPIs.

• Participate in technology and information security risk management, proposing treatment and mitigation strategies.

• Develop disaster recovery and business continuity strategies for critical systems, applications, and services.

• Define, document, and test procedures for restoring technology environments after incidents, operational failures, or disasters.

• Identify and classify critical systems while defining RTOs and RPOs.

• Plan, implement, and validate operational continuity strategies.

• Conduct regular contingency, disaster recovery, and business continuity exercises and tests.

• Create action plans for contingency scenarios involving infrastructure failures, cyberattacks, service outages, and natural disasters.

• Test and validate redundant environments, contingency servers, backups, and alternative communication and operating mechanisms.

• Define the roles, responsibilities, and operational procedures of teams involved in incident response, contingency, and operational continuity.

• Structure and maintain internal and external communication channels for crisis situations.

• Consolidate information from service requests, incidents, vulnerabilities, and information security-related demands.

• Provide technical support and specialized guidance to security, infrastructure, development, and governance teams.

• Serve as a technical reference in information security, risk management, business continuity, and disaster recovery.

• Execute additional activities related to information security, digital asset protection, and ICT service continuity management.

⛳️ Requirements

• Bachelor's degree in Information Technology or a related field.

• Minimum of five (5) years of experience in the specified specialty, in critical, high-availability corporate environments, demonstrated through employment records or a statement from a public or private institution.

• ITIL 4 training with at least twelve (12) hours of coursework.

• Official ITIL 4 Foundation certification or higher.

• One of the following certifications: ECSA (EC-Council Certified Security Analyst), CySA+ (CompTIA Cybersecurity Analyst), ECIH (EC-Council Certified Incident Handler), or CSIH (Certified Specialist Incident Handler).

• Strong experience in Information Security, Risk Management, Incident Response, Forensic Analysis, Security Governance, Business Continuity (BCP), Disaster Recovery (DR), Vulnerability Management, and Compliance.

• Familiarity with ISO 27001/27002, CIS Controls, SANS, OWASP, SIEM, SOC, Cloud Security, log analysis, security indicators, and CNJ regulations will be regarded as a plus.

🏝️ Benefits

• Hapvida, Bradesco, or Unimed health insurance (availability depends on the region).

• Hapvida Odonto or Bradesco Dental insurance.

• Meal or food allowance.

• Life insurance fully funded by Lanlink.

• Transportation allowance.

• Gympass.

• Auster.

• Pharmacy benefit.

• Partner college and university program.

• Corporate Education Platform.

• Welcome-to-the-world baby kit.

• Moodar Platform.