Information Security Analyst

Description

Job Summary: Information Security Analyst to translate security into effective processes and policies, ensuring documentation and compliance, and acting as a multiplier of best practices. Key Highlights: 1. Work on information security projects and audits. 2. Identify risks and respond to security incidents. 3. Promote best practices and raise security awareness. Join the IT Governance team as an **Information Security Analyst**. Your mission will be to translate security into effective processes and policies, ensuring our documentation is always one step ahead of threats and implemented in practice (monitoring and response). Your daily work will focus on identifying risks, responding to incidents, and promoting best security practices. This position is based in **Porto Alegre/RS**, in a hybrid format (3 days on-site, 2 remote). **Responsibilities and Duties** * Develop and maintain Information Security documentation (policies, procedures, and other related documents). * Participate in projects, initiatives, and audits related to information security. * Identify and report information security risks to management. * Propose rules and controls for the use of IT assets and systems, such as email, internet, etc. * Administer maintenance, monitoring, and control of deployed security solutions, such as firewalls, antivirus software, and other company information security systems. * Analyze and respond to information security incidents. * Conduct periodic reviews of firewall rules, proxy configurations, antivirus settings, and other Information Security tools. * Monitor penetration tests and vulnerability assessments of the Company's environment and conduct Information Security audits across Company units. * Share technical and operational information with internal teams and vendors providing information security services. Act as a multiplier of information security best practices within IT and other organizational areas by delivering training sessions and awareness campaigns on information security, as well as providing technical support to users on information security matters. * **Requirements and Qualifications** * Bachelor’s degree in Information Systems, Computer Science, Information Security, or Networking. * Experience with Security Tools: Firewall, Proxy, VPN, Antivirus, SIEM, Vulnerability Scanning. * Knowledge of digital certificates (SSL, A3\). * Experience applying best practices from information security frameworks such as NIST, ISO 27001, and PCI\-DSS. * Knowledge of O365\ security. * Azure Cloud experience is desirable. **Additional Information** * Annual Profit-Sharing Plan (PPR). * Unimed health insurance. * Dental insurance. * On-site cafeteria. * Transportation allowance per CLT regulations. * Retail Workers’ Day Off. Our story began in 1935, founded by Francisco José and Santina Zaffari, who—with care and dedication—built a grocery store in the interior of Rio Grande do Sul. From this small shop began a journey focused on quality, variety, welcoming environments, and service—differentiators that have become the hallmark of our Company. Today, the Zaffari Group comprises several business segments, including the largest supermarket and hypermarket chain in Southern Brazil. It also operates shopping centers in Rio Grande do Sul and São Paulo, as well as a credit card issuer. In 2023, the Cestto Atacadista wholesale network was launched. Our large family now unites 12,000 dedicated collaborators committed to our mission of delivering the best customer experience. We provide a pleasant, safe, and developmental environment where professional and personal growth go hand in hand. We are an educational company with a comprehensive perspective—from first-job experiences to employment opportunities for mature professionals aged 50\+. We are committed to respecting differences and fostering positive social interaction, aligned with our dedication to serving the community well—the very reason for our existence. Our values and DNA accompany us: quality, integrity, commitment, and relationship. We invest in people because they are life, soul, and the success of every project. With diverse approaches, we connect with each other through our shared purpose: doing our best for customers and colleagues, every day. Join our great family! Follow opportunities here on this page!