SENIOR INFORMATION SECURITY SYSTEM ANALYST

Description

Job Summary: Responsible for acting as a technical reference in Information Security and Privacy, managing and improving management systems, and conducting risk assessments. Key Highlights: 1. Technical reference in Information Security and Privacy 2. Management and continuous improvement of ISMS/IPSMS 3. Leading the implementation and evolution of ISO controls On-site position in Florianópolis \| 44 hours per week \| Competitive salary **Why join us?** Dynamox is a high-tech company that develops intelligent solutions for monitoring vibration, temperature, current, and voltage, helping maintenance and reliability teams make industry safer, more efficient, and more sustainable. Today, we are the only global company in the maintenance field holding the international certifications ISO 27001, 27701, 27017, and 27018, in addition to ISO 9001. Beyond well-structured processes, we believe in people. Here, you will find an organized, collaborative, and continuous-improvement-oriented environment where learning is encouraged and excellence is part of daily life. We value those who seek growth, innovation, and making a difference. **Key Responsibilities:** * Act as a technical reference in Information Security and Privacy, supporting technology and business areas in defining and evolving controls. * Manage and continuously improve the Information Security and Privacy Management System (ISMS/IPSMS), including processes, controls, and documentation. * Conduct risk assessments, identifying, analyzing, treating, and monitoring security and privacy risks. * Lead the implementation and evolution of controls specified in ISO standards 27001, 27017, 27018, and 27701, promoting organizational maturity. * Coordinate vulnerability management, security incidents, and risk treatment plans with involved teams. * Support internal and external audits and certification processes by providing evidence, technical analyses, and follow-up on corrective actions. * Develop, review, and maintain policies, standards, procedures, and other documents related to Information Security and Privacy. * Monitor security, compliance, risk, and control performance indicators, proposing continuous improvements. * Ensure integration of Information Security, Privacy, and Risk Management requirements into projects, systems, suppliers, and processes, including due diligence assessments. * Promote an Information Security culture through training, awareness activities, and dissemination of corporate policies, acting autonomously and proactively in leading area initiatives. Requirements: * **Standards, Certifications, and Audits**: Practical experience with ISO 27001, ISO 27701, ISO 9001, and conducting internal and external audits. * **Risk Management and Compliance**: Ability to identify, assess, and mitigate risks, ensuring regulatory and management system compliance. * **Continuous Improvement and Change Management**: Experience implementing improvements, optimizing processes, and evolving management systems. * **Training and Organizational Influence**: Ability to disseminate knowledge, conduct training sessions, and act as a technical reference for various departments. **Education:** * Completed undergraduate degree in Administration, Quality, Engineering, or related fields. **Benefits:** * **Multi-benefit card**: Flexible card facilitating use for meals, transportation, leisure, pharmacy, and more — you choose how and where to use it; * **Health and dental plan**: Health and dental coverage for employees after the probationary period; * **SESI agreement**: Farmasesi and OdontoSesi; * **Health and wellness**: GoGood and Wellhub agreements (discounts at gyms and consultations with nutritionists, psychologists, and other health professionals); * **Ergonomics care**: On-site physiotherapy/osteopathy services; * **Professional development**: Support for professional growth through financial incentives for courses, training programs, and certifications; * **Partnerships**: EBAC and Influx; * **Financial incentives**: Profit-sharing program (PLR), performance bonuses, bonuses for completing training programs, and tenure-based bonuses; * **Office comfort and meals**: Complimentary fruits and coffee, plus access to Market4u and Dynamarket; * **Culture and work environment**: Monthly social events and a relaxed atmosphere, with no dress code.