Information Security Manager

Description

Job Summary: Manage the continuity, security, and evolution of the IT infrastructure, coordinating cybersecurity teams and implementing policies to mitigate risks. Key Highlights: 1. Lead cybersecurity teams, aligning them with strategic and operational goals. 2. Implement risk governance frameworks (NIST, COBIT, COSO). 3. Coordinate incident response and promote continuous security improvement. Ensure continuity, security, and evolution of the information technology infrastructure, guaranteeing that physical and logical resources remain consistently available, up-to-date, and aligned with the organization’s operational needs through efficient, preventive, and innovative management. **Responsibilities and Duties** * Supervise execution of cybersecurity activities in accordance with organizational guidelines; * Coordinate technical teams in implementing security policies and procedures aligned with international standards, frameworks, or internal guidelines; * Conduct detailed risk analyses to identify security gaps and propose appropriate technical solutions; * Facilitate technical and operational alignment among internal and external teams involved in security projects; * Monitor emerging trends and threats in the field of cybersecurity and suggest adjustments to existing processes; * Support preparation of technical documentation required for external audits and regulatory compliance; * Prepare technical reports on security compliance, including metrics and performance indicators; * Manage the task queue and service requests from other information security professionals; * Assess and mitigate risks associated with third-party vendors, including cloud providers and technology partners, incorporating contingency clauses into contracts; * Coordinate internal and external security audits, supervising team preparation and remediation of identified gaps; * Lead cybersecurity teams, aligning all members with the organization’s strategic and operational goals; * Implement risk governance frameworks such as NIST, COBIT, or COSO to ensure regulatory compliance and effective threat mitigation; * Define security metrics and KPIs, continuously monitoring the effectiveness of implemented policies and controls and adjusting strategies as needed; * Manage authentication and authorization processes, defining guidelines for implementing IAM (Identity and Access Management) and PAM (Privileged Access Management) solutions; * Supervise integration of security solutions across multi-cloud and hybrid environments, ensuring consistency in data protection policies across platforms; * Coordinate execution of incident response plans, ensuring teams are prepared to mitigate attacks such as ransomware, phishing, and data breaches; * Implement continuous improvement cycles using methodologies like PDCA, regularly evaluating security processes and technologies to identify improvement opportunities; * Promote effective communication between technical and executive teams, translating complex technical concepts into accessible language to support strategic decision-making; * Conduct post-incident analyses, identifying lessons learned and proposing improvements to prevent recurrence; Perform other information security-related activities as operationally required. **Requirements and Qualifications** **EDUCATION** * Completed Bachelor’s degree in Information Technology (IT). **PROFESSIONAL EXPERIENCE** * Experience in information security and in technical coordination or team supervision roles. Experience must be demonstrated via a legal entity contract (PJ) or work record (Carteira de Trabalho), both containing start and end dates for the activity. **CERTIFICATIONS/COURSES/TRAININGS** * Official ITIL 4 Foundation certification or higher. *One of the following certifications:* CISSP (Certified Information Systems Security Professional). CISM (Certified Information Security Manager). ECSA (EC-Council Certified Security Analyst). CompTIA Security+. CompTIA CASP+. ECIH (EC-Council Certified Incident Handler). CSIH (Certified Specialist Incident Handler). **Additional Information** **Benefits:** Hapvida, Bradesco Saúde, or Unimed health insurance (subject to local availability); Hapvida Odonto or Bradesco dental insurance; Alelo Food or Meal Voucher; Life insurance fully covered by Lanlink; Transportation voucher; Pharmacy discount program; University tuition discount program; Totalpass; Internal education platform; Welcome-to-the-world Baby Kit; Moodar platform (therapy platform) Great to have you visit us virtually! Shall we get to know each other better? For over 35 years, Grupo Lanlink has been building transformative experiences—not only for companies but also for people’s lives—across all five regions of Brazil. We envision the future with the intention of impacting lives and serving as the safe harbor of innovation. Our spaces are built by our employees, who wear the shirt proudly and create, day after day, a joyful and collaborative workplace. We believe trust is the foundation of our relationship with our people and our clients—a trust cultivated through practices such as hiring and welcoming, inspiring, speaking, listening, thanking, developing, caring, celebrating, and sharing. We are many, we are diverse, \#nossomosLanlink. Now it’s your turn! Let us get to know you too? Join Lanlink—you belong here. **HEY, ALL OUR POSITIONS ARE PREFERRED FOR PEOPLE WITH DISABILITIES (PCD)!**