Analista de Segurança da Informação
J
JobgetherFinancial services
Based in BrazilFull-Time
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
Requirements
- Completed bachelor's degree in a relevant field, preferably Information Security, Information Technology, a related technical discipline, or a field focused on risk management.
- Professional experience in information security risk management.
- Extensive knowledge of ISO 27005 and ISO 31000 and their application to information security and organizational risk management.
- Ability to identify, analyze, evaluate, and prioritize information security risks across infrastructure, systems, and business scenarios.
- Experience developing or monitoring risk treatment plans.
- Ability to recommend mitigation measures appropriate to identified risks.
- Familiarity with information security policies, internal standards, and risk management processes.
- Strong written and verbal communication skills to explain risks, recommendations, and mitigation plans to different stakeholders.
- Ability to work with cross-functional teams, understand business needs, and translate risk assessments into practical security recommendations.
- Analytical thinking, sound judgment, attention to detail, and a continuous improvement mindset.
Responsibilities
- Identify, analyze, assess, and support the treatment of information security risks.
- Map and evaluate risks across business scenarios, IT infrastructure, systems, and information environments.
- Develop, define, and monitor plans to reduce identified risks and potential business impact.
- Recommend practical security measures aligned with internal department needs and identified risk levels.
- Track mitigation initiatives, assess their effectiveness, and support improvements to risk management processes.
- Promote information security and cybersecurity risk awareness across the organization.
- Develop, review, and update information security policies, standards, procedures, and guidelines.
- Apply ISO 27005 and ISO 31000 principles and standards to risk management.
- Work with relevant teams to understand business requirements, communicate risk exposure, and coordinate mitigation measures.
View Full Description & ApplyYou'll be redirected to the employer's site
