Senior GRC Analyst

Description

Job Summary: Detail-oriented GRC professional focused on Information Security to lead initiatives, conduct risk analyses, and support audits. Key Highlights: 1. Build a solid career in GRC focused on Information Security 2. Lead GRC initiatives aligned with ISO 27001, 27701, 27002, 27005, and LGPD 3. Opportunity for learning and development If you are detail-oriented, enjoy understanding "the why" behind rules, and wish to build a solid career in GRC focused on Information Security, this position is for you. **Responsibilities:** Lead and support Governance, Risk, and Compliance (GRC) initiatives aligned with ISO 27001, 27701, 27002, 27005, and LGPD. Conduct risk analyses (identification, assessment, and treatment), maintaining an updated risk management cycle. Support internal and external audits, including evidence preparation and action plan follow-up. Perform information security posture assessments of third parties with evidence analysis. Develop, review, and maintain information security policies, standards, and procedures. Execute maturity and regulatory compliance assessments. Support responses to RFPs and technical proposals related to GRC. Collaborate with business and IT teams to ensure adherence to security and privacy practices. **Requirements:** **Requirements:** Prior experience in GRC or Information Security (minimum 3 years) Practical knowledge of ISO 27001/27002 and risk management (ISO 27005\) Familiarity with LGPD and data privacy Experience with OneTrust, Security Scorecard, or other TPRM tools Experience with audits and internal controls Strong communication and analytical skills **Preferred Qualifications:** Certifications (ISO 27001 Lead Implementer/Auditor, CISM, CRISC, ISO 27701\) Experience with additional frameworks (NIST, CIS Controls) Intermediate/Advanced English Benefits In addition to the opportunity for learning and development, you will receive: Meal Voucher (R$40.00/day); Transportation Allowance (R$12.00/day); **Access to health platforms:** Wellhub, Psicologia Viva, and Conexa Saúde; Dental (Uniodonto) and Medical (Unimed) Plans; Life Insurance; Flexible working hours;