Analista de Segurança da Informação
Core
Identify, assess, evaluate, and mitigate information security and cybersecurity risks across diverse technology environments in a financial services setting.
Role type
Information Security Analyst (Risk Management)
Builds
Security policies, risk mitigation plans, and security awareness programs
Domain
Financial services / Information Security Risk Management
Deliverable
dashboards & analysis
Required skills
Information security risk management, ISO 27005, ISO 31000, risk identification and assessment, risk mitigation planning, security solution development, regulatory and framework alignment
Preferred skills
Cross-functional collaboration, analytical thinking, continuous improvement mindset
Technologies
ISO 27005, ISO 31000
Responsibilities
Support the identification, analysis, assessment, and treatment of information security risks; Map and evaluate security risks across different business scenarios, IT infrastructure, systems, and information environments; Develop, define, and monitor action plans designed to reduce identified risks; Recommend effective and practical security measures tailored to the needs of internal departments; Track mitigation initiatives, assess their effectiveness, and support ongoing improvements to the organization's information security risk management processes; Promote information security and cybersecurity risk management awareness across the organization; Develop, review, and update internal information security policies, standards, procedures, and guidelines; Apply recognized risk management principles and information security standards, particularly ISO 27005 and ISO 31000, to support structured and effective risk management.
Seniority
Mid-level, hands-on IC