Pessoa Analista de Risco e Segurança da Informação
Core
Develop and review IT governance policies, processes, and procedures to ensure alignment with regulatory standards and protect technological assets.
Role type
Information Security and Risk Analyst
Builds
Security controls, risk mitigation plans, and privacy compliance frameworks
Domain
Information Security, Risk Management, Data Privacy (LGPD)
Required skills
Information Security (ISO 27001), Risk Mapping, Process Modeling, Data Privacy Legislation (LGPD), Agile Methodologies, NIST CSF, CIS Controls, Third-Party Risk Management, Google Tools, Project Management Tools (Jira, Miro)
Preferred skills
Security Certifications (CISSP, Security+, CSSLP), ISO 31000 Certification, AI Risk Assessment
Technologies
Jira, Miro, Google Workspace, NIST CSF, CIS Controls
Responsibilities
Lead Privacy and Data Protection Committee meetings; Conduct risk analysis for projects and new initiatives; Evaluate security clauses in vendor contracts; Perform due diligence on vendors; Define and report risk indicators; Analyze security and data incidents; Plan security awareness actions
Seniority
Mid-level, hands-on IC
