Job Summary: The Onfly is seeking a GRC Analyst for its Information Security area, responsible for supporting the maintenance and evolution of the ISMS, ensuring compliance with standards and audits. Key Highlights: 1. Manage information security risks and ensure compliance with standards. 2. Support the maintenance of ISO 27001 certification and internal/external audits. 3. Conduct security awareness training and develop security policies. Onfly is a startup focused on helping companies travel better! Democratizing travel management, expense reimbursements, and offering discounts on flights, hotels, and car rentals — all within a complete and simple experience — is the core of our business. We are looking for a **GRC Analyst** to join Onfly's Information Security team, focusing on governance, risk, and compliance. This person will support the maintenance and evolution of the ISMS, ensuring compliance with standards, audits, and internal and client requirements. **Responsibilities and Duties** * Support the maintenance and evolution of ISO 27001 certification * Manage information security risks * Support internal and external audits * Develop and maintain security policies, standards, and procedures * Address client security-related requests (BIDs, due diligence, questionnaires) * Conduct security awareness training (LGPD, information security, etc.) * Support vulnerability management and report generation * Collaborate with various departments to ensure adherence to security best practices **Requirements and Qualifications** * Experience in GRC within information security; * Knowledge of ISO 27001 and/or security frameworks; * Familiarity with LGPD and data protection practices; * Experience with audits and risk management; * Strong communication and organizational skills; * Analytical mindset and sense of responsibility. **Preferred Qualifications:** * Experience handling client requests (BIDs, due diligence, security questionnaires); * Certifications in this field (ISO 27001, ISO 27701, etc.); * Experience with risk or vulnerability management tools. **Additional Information** * Hybrid work model (2 days per week onsite, remainder remote); * Flexible working hours; * Meal allowance via flexible card: R$40 (no 6% deduction); * Transportation allowance via flexible card (no 6% deduction); * Unimed health plan, with no copayment and no monthly fee for the employee (fully covered by Onfly :D); * Dental plan (monthly fee deduction); * Pharmacy discount; * No dress code; * Online psychological therapy benefit (Vittude); * Gym benefits! (Gympass); * 90% scholarship for language studies; * Annual budget of up to R$1,000 for trainings/certifications relevant to your role; * Discounts on undergraduate and postgraduate programs (UNA and UNIBH); * Clube Certo discount package with no monthly fee; * Funeral assistance (Grupo Zelo); * Extended maternity/paternity leave; * R$200 voucher on Onhappy (an exclusive platform offering discounted travel across Brazil); * Life insurance. #### **We are the largest B2B Travel Tech company in Latin America and, for two consecutive years, have been ranked among the best places to work in Brazil according to the Great Place to Work ranking.** #### **With intensive use of technology and a healthy dose of human warmth,** **we simplify travel and expense management for over 1,600 client companies**, delivering greater practicality, cost savings, and comfort to everyone. #### **We believe business travel can be simpler with technology. To achieve this, we seek talent for mutual learning within a high-performance team that wants to grow significantly.** #### **We are driven by innovation and believe diverse and inclusive environments are essential to achieving it. Thus, we offer an inclusive space for everyone and promote opportunities to accelerate careers.
João Silva
Indeed · HR
João Silva
Indeed · HR
