Senior Risk Analyst

Description

Job Summary: Work as a Senior Risk Analyst in the Cyber Risk Management team, protecting assets, information, and employees while contributing to business continuity. Key Highlights: 1. Protect assets and information within a proactive security culture. 2. Conduct risk analyses based on frameworks such as NIST CSF and ISO 27005. 3. Assess security controls in alignment with ISO 27001 and LGPD. **About Bradesco** Bradesco is one of Brazil's largest financial groups, with a history marked by pioneering spirit and innovation. Through our broadly diversified portfolio of financial products, banking services, and insurance offerings, we support individuals' aspirations and foster sustainable growth for businesses and society. Join our financial ecosystem and impact the experience of millions of people! At Bradesco, we value diversity in all its forms. Therefore, our job openings are open to everyone, regardless of gender, race, sexual orientation, disability, age, or any other characteristic. Learn more at https://banco.bradesco/html/classic/sobre/index.shtm **Responsibilities and Duties** What is our Cyber Security team? We are dedicated to protecting assets, information, and our employees. We work proactively to identify and mitigate risks, respond rapidly to incidents, and promote a security culture across the entire organization. Our commitment is to the integrity, confidentiality, and availability of corporate resources, ensuring business continuity and customer trust. Work model: Hybrid – 3 days onsite Unit: Osasco – SP **What will your day-to-day look like?** As a Senior Risk Analyst, you will work in the Cyber Risk Management team and your main activities will include: * Conducting risk analyses based on frameworks such as NIST CSF, ISO 27005, MITRE ATT&CK, and CIS Controls; * Identifying threats, vulnerabilities, impacts, and probabilities, proposing technical and managerial recommendations; * Building and maintaining the Cyber Risk Register; * Control Assessment and Compliance; * Evaluating security controls in alignment with ISO 27001, LGPD, BACEN 4658, SOX ITGC, and internal policies; * Participating in defining and reviewing standards, policies, and technical guidelines. **Requirements and Qualifications** What do you need to have or know? * Undergraduate degree in progress or completed * Familiarity with GRC tools: ServiceNow, OneTrust, and/or Archer; * Experience in the field. It’s a plus if you have: * English proficiency; * Certifications in the field. **What We Offer** At Bradesco, we value health and well-being, offering an extensive portfolio of benefits to all our employees: * PLR or Bonus: Based on position eligibility* * Health Insurance * Dental Insurance * Life Insurance * Food Allowance * Meal Voucher * 13th Food Basket * Total Pass * Transportation Voucher (optional enrollment) * Discounts on products and services from partner companies * Private Pension Plan (optional enrollment, with financial contribution from Bradesco Organization) * Viva Bem Bradesco: health, well-being, and quality-of-life program * Unibrad: Bradesco Corporate University * Fee Waiver: special conditions on various products and services * Daycare or Babysitter Assistance * Extended Paternity Leave of 20 days * Maternity Leave of 180 days, including assisted prenatal and postpartum follow-up