Senior Information Security Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Oversee IAM access management in both SAP and non-SAP settings

• Handle the entire Joiner, Mover, Leaver (JML) access lifecycle, which includes user creation, modifications, and deletions

• Manage profiles and roles within SAP ECC, S/4HANA, and SAP GRC environments

• Implement security measures like least privilege and segregation of duties (SoD)

• Assist in conducting risk assessments and prioritizing remediation efforts

• Perform regular access reviews and recertification processes

• Oversee critical generic and emergency access while identifying control deficiencies

• Define, document, and standardize processes, approval workflows, and integrations among SAP, Active Directory/Azure AD, and HR systems

• Engage in role redesign and the automation of provisioning

• Support both internal and external audits, addressing any nonconformities

• Ensure adherence to Brazil’s General Data Protection Law (LGPD), NIST guidelines, and industry best practices

• Leverage artificial intelligence for detecting anomalous behavior, conducting risk analysis, automating tasks, documentation, predictive modeling, and natural language processing (NLP)

• Contribute to AI governance, ensuring ethical practices, auditability, and explainability

⛳️ Requirements

• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related discipline

• Practical experience with SAP Security (roles, profiles, and users) and SAP GRC Access Control

• Background in industrial companies

• Strong understanding of IAM, RBAC, and JML processes

• Familiarity with Segregation of Duties (SoD) and access risk analysis

• Knowledge of access governance and compliance in intricate environments

• Experience with Active Directory/Azure AD, IAM tools, and HR systems

• Basic knowledge of Machine Learning in the realm of security, including anomaly detection, risk classification, and clustering similar profiles

• Understanding of Generative AI (LLMs) and its use in documentation, policy formulation, and security analysis

• Awareness of AI Governance frameworks applicable to security

• Capability to evaluate risks associated with third-party AI solutions, including data privacy concerns, sensitive information leaks, and adversarial attacks

• Foundational knowledge of prompt engineering for the secure and efficient use of AI assistants in security contexts

🏝️ Benefits

• Medical insurance for you and your dependents

• Dental insurance for you and your dependents

• Life insurance

• Wellhub: access to gyms and wellness applications focusing on physical, emotional, and nutritional health, including a free digital plan

• Pharmacy benefits featuring special prices on medications and payroll deduction options

• De Bem com a Mente program, providing mental health support and rehabilitation services

• Pronto Atendimento Pessoal, offering financial, psychological, legal, and social assistance

• Gestar Juntos, a support program for expectant parents and their dependents

• Childcare allowance for children up to 24 months old

• Meal voucher or cafeteria and basic food basket, depending on the location

• Transportation voucher or company shuttle service, depending on the location

• Profit Sharing and Results (PLR), determined by company performance and individual targets

• Private pension plan with employer contributions

• Special loans through Fundação Itaúsa with payroll deductions at preferential rates

• UniDexco: an online training and course platform

• Dexco Partnership Club: discounts available with nearly 700 partners

• Dexco Store: discounts on products from Dexco brands

• Christmas gift card