Junior Information Security Analyst

Description

Job Summary: We are seeking a Junior Information Security Analyst to join our team — someone passionate about people and committed to impacting the lives of millions of workers. Key Highlights: 1. Operate and evolve Identity and Access Management (IAM) tools 2. Lead initiatives for Active Directory (AD) Governance 3. Ensure compliance with LGPD and ISO 27001 **Junior Information Security Analyst** **Summary:** We are looking for a **Junior Information Security Analyst** to join our VR team. If you are passionate about people and driven by the purpose of impacting the lives of millions of workers — supporting and guiding daily operational solutions — join us! **Responsibilities:** *Identity and Access Management (IAM)* * Operate and evolve IAM tools used across the VR ecosystem. * Ensure full identity lifecycle management: Provisioning, Movement, Deprovisioning (JML – Joiner, Mover, Leaver); enforce the Principle of Least Privilege. * Identity and Access Management (IAM) *Active Directory (AD) Governance – Risk Reduction* Lead continuous initiatives to: * Reduce the number of privileged users * Review administrative groups (Domain Admins, Enterprise Admins, etc.) * Implement controls such as: Account segregation (standard vs. privileged accounts), Tiering Model (Tier 0, 1, 2\), mapping and eliminating excessive or inappropriate privileges. *Service Account Management* * Inventory and classify all service accounts. * Implement: periodic credential rotation, reduction of privileges to the minimum necessary * Evolve toward more secure models: gMSA (Group Managed Service Accounts), identity-based managed authentication * Eliminate misused service accounts (e.g., human accounts used as service accounts). *Identity Hygiene* * Identify and remediate: accounts with no password changes over extended periods, inactive accounts (stale accounts) * Implement policies for: automatic expiration, periodic access reviews (recertification), reducing risks from orphaned accounts and shadow IT. *Privileged Access Management (PAM)* * Ensure 100% of privileged access is controlled via PAM: password vaulting, monitored sessions, Just\-in\-Time Access (JIT) * Implement: automatic rotation of privileged credentials, elimination of hardcoded credentials * Advance maturity toward: on-demand access, Zero Standing Privileges *Automation and Orchestration (Horacius)* * Develop and enhance automated workflows in Horacius: role-based automatic provisioning, auditable approval trails, integration with AD, systems, and PAM * Reduce manual intervention and operational risk. * Embed security controls within workflows (security by design). *Controls, Auditing, and Compliance* * Ensure compliance with LGPD and ISO 27001 * CIS Controls (especially access control) * Prepare evidence for internal and external audits. * Create risk and maturity indicators: % of privileged accounts, % of accounts outside PAM, % of accounts without credential rotation, average deprovisioning time **Education:** * Completed undergraduate degree **Experience:** * Experience with automation (scripts, APIs, workflows) and identity governance tools **Technical Competencies:** * Knowledge of Active Directory (AD DS, GPO, Hardening) * PAM (CyberArk, BeyondTrust, Delinea or similar) * IAM / IGA * Knowledge of: Zero Trust models, identity security in hybrid environments (on\-prem \+ cloud) **Behavioral Competencies:** * Strong teamwork skills * Excellent interpersonal relationships, including with other departments across the company **Benefits:** * Meal Voucher * Food Voucher * Evolui Program — Partnership with Unico Skill * Culture Voucher * Medical Assistance * Dental Assistance * Life Insurance * Pharmacy Partnership * Profit Sharing Program * Monthly Home Office Allowance * Total Pass and/or Wellhub * Partnership with Zenklub * Childcare/Babysitter Assistance * Paid Leave **At VR, we value diversity and inclusion. All our opportunities are open to people with disabilities (PcD).**