Senior Information Security Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Identity and Access Management (IAM – SAP and non-SAP);

• Accountable for the entire access management lifecycle (Joiner, Mover, Leaver), encompassing user creation, modification, and removal, along with the management of profiles and roles within SAP environments (ECC / S/4HANA and SAP GRC);

• Ensuring security measures such as the principle of least privilege and segregation of duties (SoD), while aiding in risk analyses and prioritizing remediation efforts;

• Performing regular access reviews (recertification), overseeing critical accesses (generic and emergency), pinpointing control deficiencies, and suggesting structural enhancements and ongoing process improvements;

• Establishing, documenting, and standardizing procedures, approval workflows, and system integration (SAP, Active Directory/Azure AD, and HR systems);

• Engaging in profile redesign and provisioning automation projects, ensuring that access aligns with business processes while maintaining a balance between security and operational continuity;

• Assisting with internal and external audits, addressing non-conformities, and guaranteeing compliance with regulations and best practices (LGPD, NIST);

• Leveraging artificial intelligence for the identification of anomalous behavior, risk assessment, process automation, and documentation, including the deployment of predictive models and NLP. Participating in AI governance to uphold ethics, auditability, and transparency.

⛳️ Requirements

• A Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field;

• Practical experience with SAP Security (roles, profiles, users) and SAP GRC Access Control;

• Background in industrial or manufacturing environments;

• Strong understanding of IAM, RBAC, and Joiner-Mover-Leaver (JML) processes;

• Knowledge of Segregation of Duties (SoD) and access risk assessments;

• Governance and compliance expertise in complex access environments;

• Experience interacting with Active Directory/Azure AD, IAM tools, and HR systems;

• Familiarity with Machine Learning principles as they relate to security, including anomaly detection, risk classification models, and clustering of similar profiles;

• Basic understanding of Generative AI (LLMs) and their uses in documentation, policy creation, and security analysis support;

• Awareness of AI governance frameworks relevant to security;

• Capability to evaluate risks associated with third-party AI solutions, including data privacy concerns, potential information leakage, and adversarial threats;

• Knowledge of prompt engineering for the safe and effective utilization of AI assistants in security applications.

🏝️ Benefits

• Medical assistance for you and your dependents;

• Dental assistance for you and your dependents;

• Life insurance;

• Wellhub: access to gyms and wellness applications for physical, emotional, and nutritional well-being — including a complimentary digital plan;

• Pharmacy agreement: medications at special prices with payroll discounts;

• De Bem com a Mente: a mental health program offering support and rehabilitation;

• Pronto Atendimento Pessoal: personal immediate assistance providing financial, psychological, legal, and social support;

• Gestar Juntos: support and guidance program for pregnant employees and their dependents;

• Daycare allowance for children up to 24 months;

• Meal voucher or company cafeteria and basic food basket (based on location);

• Transportation voucher or company shuttle (based on location);

• Profit Sharing (PLR) based on company performance and individual targets;

• Private pension: company contributions to your retirement savings;

• Special loans via the Itaúsa Foundation and payroll-deductible loans at preferential rates;

• UniDexco: online platform for courses and training;

• Dexco Partnership Club: discounts with nearly 700 partners;

• Dexco Store: discounts on products from Dexco brands;

• Christmas card.