Analista de Segurança da Informação

Job description

**This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an Analista de Segurança da Informação based in Brazil.** Join a collaborative financial services environment where information security and risk management play a critical role in protecting systems, infrastructure, and business operations. As an Information Security Analyst, you will help identify, assess, evaluate, and mitigate information security and cybersecurity risks across diverse technology environments. You will work closely with internal teams to develop practical security solutions aligned with business needs and institutional risk management standards. Your responsibilities will include reviewing security policies, coordinating risk mitigation initiatives, and helping reduce the potential impact of security incidents. You will also contribute to strengthening the organization's security culture by promoting awareness and responsible risk management practices. This is an opportunity to apply your expertise in information security risk management while supporting operational resilience and continuous improvement in a people-focused, cooperative environment. ### Accountabilities - **Information security risk management:** Support the identification, analysis, assessment, and treatment of information security risks, helping ensure risks are managed systematically and consistently. - **Risk identification and assessment:** Map and evaluate security risks across different business scenarios, IT infrastructure, systems, and information environments. - **Risk mitigation planning:** Develop, define, and monitor action plans designed to reduce identified risks and minimize potential business impact if risks materialize. - **Security solution development:** Recommend effective and practical security measures tailored to the needs of internal departments and aligned with identified risk levels. - **Risk monitoring and follow-up:** Track mitigation initiatives, assess their effectiveness, and support ongoing improvements to the organization's information security risk management processes. - **Security awareness and culture:** Promote information security and cybersecurity risk management awareness across the organization, encouraging proactive identification and responsible handling of risks. - **Policies and standards:** Develop, review, and update internal information security policies, standards, procedures, and guidelines to support consistent security practices. - **Regulatory and framework alignment:** Apply recognized risk management principles and information security standards, particularly ISO 27005 and ISO 31000, to support structured and effective risk management. - **Cross-functional collaboration:** Work with relevant teams to understand business requirements, communicate risk exposure, and coordinate appropriate mitigation measures. - **Additional responsibilities:** Perform related activities assigned by leadership within the scope of information security risk management. ## Requirements - Bachelor's degree completed in a relevant field, preferably Information Security, Information Technology, a related technical discipline, or another field with a focus on risk management. - Demonstrated professional experience in information security risk management. - Extensive knowledge of **ISO 27005** and **ISO 31000**, including their application to information security and organizational risk management. - Ability to identify, analyze, evaluate, and prioritize information security risks across infrastructure, systems, and business scenarios. - Experience developing or monitoring risk treatment plans and recommending mitigation measures appropriate to identified risks. - Familiarity with information security policies, internal standards, and risk management processes. - Strong written and verbal communication skills, with the ability to explain risks, recommendations, and mitigation plans clearly to different stakeholders. - Proactive, collaborative, and engaged working style, with a strong sense of responsibility and attention to detail. - Ability to work effectively with cross-functional teams, understand business needs, and translate risk assessments into practical security recommendations. - Analytical thinking, sound judgment, and a continuous improvement mindset. ## Benefits ### Compensation, Recognition, and Financial Security - Service anniversary bonus recognizing employee tenure and commitment. - Performance Recognition Award for contributions and achievements. - Profit-Sharing Program (PPR), linking employee performance to organizational results. - Private pension plan to support long-term financial planning. - Cresol Longevidade program to encourage financial preparation for the future. - Life insurance, including coverage for serious illnesses. - Christmas assistance to support holiday celebrations. - Marriage assistance to celebrate important life milestones. ### Health and Well-being - Health insurance with the monthly premium fully covered by the employer. - Dental insurance with the monthly premium fully covered, with no additional cost for procedures covered by the plan. - Wellness initiatives supporting physical activity, including gym access, yoga, meditation, and similar activities. - Workplace stretching and exercise sessions through a workplace wellness program. - Free online therapy sessions through the employee emotional well-being program for employees and up to two eligible dependents, including spouses, children, and parents. - Financial incentive for eligible employees who donate blood. ### Professional Growth and Education - Postgraduate education assistance. - Educational discounts through partnerships with universities offering undergraduate degrees, postgraduate programs, and MBAs. - Access to a corporate university with continuous learning and professional development opportunities. - Opportunities for professional growth, leadership development, and ongoing training. ### Family and Lifestyle Benefits - Food and/or meal allowance. - Childcare assistance for eligible children up to age seven. - School supplies assistance for eligible children up to 11 years and 11 months. - Public transportation allowance. - Flexible vacation scheduling, with the option to divide annual leave into up to three periods. - Birthday day off, along with a special birthday gift. - Baby bonus and a welcome kit for newborns. - Extended maternity leave, with the option of an additional 30 days at full time or 60 days at half time beyond the statutory 120 days. - Extended paternity leave, with five additional days beyond the statutory entitlement. - Special care assistance for employees who are parents of people with disabilities requiring full-time care. - Up to five additional justified absence days per year for parents of children with disabilities who need to attend medical appointments or hospitalizations. - Two days of pet adoption leave to welcome a new pet into the family. - Uniform provided by the employer. ### Additional Support - Bereavement assistance providing monthly financial support to eligible dependents for one year following an employee's death. - Funeral assistance to help cover related expenses. - Three additional working days of bereavement leave beyond statutory entitlements for the loss of a parent, child, sibling, or spouse. - A collaborative and inclusive work environment focused on employee development, teamwork, and meaningful community impact.