Senior Risk Analyst

Description

Job Summary: Work as a Senior Risk Analyst in Cybersecurity, ensuring independent and critical assessment of cyber risks, with a focus on protecting assets and information. Key Highlights: 1. Asset, information, and employee protection 2. Pioneering and innovation within one of Brazil's largest financial groups 3. Impacting the experience of millions of people across the financial ecosystem **About Bradesco** Bradesco is one of Brazil's largest financial groups, with a history marked by pioneering spirit and innovation. Through our broadly diversified portfolio of financial products, banking services, and insurance offerings, we contribute to individuals' aspirations and to the sustainable growth of businesses and society. Join our financial ecosystem and impact the experience of millions of people! At Bradesco, we value diversity in all its forms. Therefore, our job openings are open to all individuals, regardless of gender, race, sexual orientation, disability, age, or any other characteristic. Learn more at https://banco.bradesco/html/classic/sobre/index.shtm **Responsibilities and Duties** What is our Cyber Security team? We are dedicated to protecting assets, information, and our employees. We proactively identify and mitigate risks, respond rapidly to incidents, and foster a security culture across the entire organization. Our commitment is to integrity, confidentiality, and availability of corporate resources, ensuring business continuity and customer trust. Work model: Hybrid \- 3 days onsite Unit: Osasco \- SP **What will your day-to-day look like?** As a Senior Risk Analyst, you will work within the Internal Controls Management area, with the following key responsibilities: * Serve as the second line of defense in cybersecurity, ensuring independent, critical, and qualified assessment of cyber risks and controls implemented by the first line. * Conduct risk analyses based on frameworks such as NIST CSF, ISO 27005, MITRE ATT\&CK, and CIS Controls. * Interpret data from SIEM, EDR, DLP, WAF, vulnerability scanners, and GRC platforms. * Prepare executive reports, critical analyses, and presentations for governance forums, committees, and senior management. * Conduct adherence and effectiveness testing of data-driven cybersecurity controls, including definition, development, and monitoring of critical KRIs for risk evaluation, using analytical tools such as Advanced Excel, Power BI, Python, among others. * Perform independent technical tests to identify and validate cybersecurity weaknesses. * Serve as the technical reference for Cybersecurity Risk within the second line. **Requirements and Qualifications** What do you need to have or know? * Completed undergraduate degree in Information Technology or related fields. * Analytical and organized profile, with the ability to translate technical topics into clear executive messages. * Advanced English proficiency. * Expertise in risk management applied to cybersecurity, including cloud computing environments (AWS, Azure, GCP). * Applied technical knowledge in domains such as Identity and Access Management, Network and Perimeter Security, Endpoint Security, Vulnerability Management, and Data Protection. It would be a plus if you have: * Familiarity with process mapping, risk assessment, control testing, and action plan monitoring. * Knowledge of SIEM tools (Google SecOps SIEM (Chronicle)), EDR (Crowdstrike Falcon), DLP (Microsoft Purview), WAF (Akamai), vulnerability scanners (Fortify and Qualys), and GRC platforms (ServiceNow). * Familiarity with frameworks such as NIST CSF, ISO 27005, MITRE ATT\&CK, and CIS Controls. **What We Offer** At Bradesco, we value health and well-being, offering an extensive portfolio of benefits to all our employees: * PLR or Bonus: Based on position eligibility\* * Health Insurance * Dental Insurance * Life Insurance * Food Allowance * Meal Voucher * 13th Food Basket * Total Pass * Transportation Voucher (optional enrollment) * Discounts on products and services offered by partner companies * Private Pension Plan (optional enrollment, with financial contribution from Bradesco Organization) * Viva Bem Bradesco: health, well-being, and quality-of-life program * Unibrad: Bradesco Corporate University * Fee Waiver: special conditions across various products and services * Daycare or Babysitter Assistance * Extended Paternity Leave of 20 days * Maternity Leave of 180 days, with assisted prenatal and postpartum support