Information Security Analyst

Description

Job Summary: Information Security Analyst to protect information and technological assets by implementing and monitoring security controls, policies, processes, and tools. Key Highlights: 1. Ensure the protection of organizational information and technological assets 2. Administer security solutions such as corporate antivirus and firewall 3. Collaborate in defining and implementing the Business Continuity Plan D'GRANEL, founded in 1986, specializes in bulk cargo transportation. Our mission is to provide creative and innovative solutions in road freight transport. Being a reference is in our DNA! We have a team of over 2\.300 employees and take great pride in connecting businesses across Brazil. Join us too! **Opportunity:** Information Security Analyst **Summary of Responsibilities:** Ensure the protection of organizational information and technological assets through the implementation, monitoring, and continuous improvement of security controls, policies, processes, and tools, thereby ensuring the confidentiality, integrity, and availability of corporate data. **Responsibilities:** * Identify vulnerabilities in networks, applications, and IT infrastructure that could be exploited by attackers; * Continuously monitor systems, networks, and applications to detect and respond to security incidents; * Conduct vulnerability assessments and propose mitigation plans; * Support internal and external information security audits; * Administer security solutions such as corporate antivirus, firewall, proxy, EDR/XDR, DLP, SIEM, VPN, and access control; * Manage user identities, access rights, and permissions across corporate systems and environments; * Conduct information security awareness campaigns for employees; * Participate in IT and business projects to ensure compliance with security requirements; * Maintain up-to-date records and reports on security incidents, vulnerabilities, and risks; * Ensure assets and systems remain updated, and maintain configurations aligned with industry best practices to maximize protection of the corporate environment; * Manage third-party vendors providing security solutions, ensuring they consistently apply optimal configurations for supplied equipment and solutions to maximize data and corporate environment protection; * Collaborate in defining and implementing the Business Continuity Plan and the Incident Response Plan.