Information Security Specialist I

Description

Job Summary: Work in the field of Information Security, ensuring protection of assets, compliance, and mitigation of cyber risks through implementation and continuous improvement of controls and processes. Key Highlights: 1. Solid experience in Information Security and incident management 2. Acting as a technical reference and mentor for teams 3. Knowledge of frameworks and standards such as ISO 27001 and LGPD Description: * Bachelor's degree completed in Information Technology, Information Security, Computer Science, Information Systems, or related fields. * Postgraduate studies or certifications in this area will be considered as advantages. * Certifications such as ISO 27001 Lead Implementer/Auditor, CompTIA Security+, CEH, Cisco CCNA Security, GIAC, AZ-500, SC-900, among others. * Solid hands-on experience in Information Security, working on implementation, monitoring, and improvement of security controls. * Practical experience with frameworks and standards such as ISO 27001, NIST, CIS Controls, and LGPD requirements. * Proven experience in security incident management and response, vulnerability analysis, and risk mitigation. * Participation in internal and external security audits (compliance, regulatory, legal). * Experience acting as a technical reference, supporting teams and disseminating best practices. * Security tools and solutions: Firewall, EDR, DLP, CASB, IAM, SIEM, among others. * Cybersecurity risk management, security policies and procedures. * Hardening, network security, infrastructure best practices, and endpoint protection. * Technical threat analysis, incident investigation, evidence collection, and documentation. * Best practices for security in on-premise and cloud environments (AWS, Azure, or GCP). * Knowledge of cryptography, authentication, access control, and identity management. * Experience in security awareness campaigns and training. * Analytical mindset and risk-based decision-making ability; clear communication for interaction with both technical and non-technical stakeholders; proactive identification of continuous improvement opportunities; collaborative attitude and ability to act as a technical mentor within the team; attention to detail, ethics, and confidentiality in carrying out activities. * Prior experience in large corporate environments or regulated sectors. * Availability to work onsite in São Bernardo do Campo — 3 days per week. Work in the field of Information Security to ensure protection of information assets, compliance of technological environments, and mitigation of cyber risks through implementation, monitoring, and continuous improvement of controls, policies, and processes, thereby guaranteeing integrity, confidentiality, and availability of corporate and operational information. Key Responsibilities: * Implement, monitor, and enhance information security controls in accordance with standards and frameworks (ISO 27001, NIST, CIS Controls, LGPD); * Perform vulnerability analysis and remediation, applying mitigation plans and tracking identified risks; * Support internal and external security audits, ensuring compliance with regulatory, corporate, and legal requirements; * Manage security incidents, conducting investigations, root cause analyses, and corrective actions; * Develop, review, and maintain information security policies, standards, and procedures; * Evaluate and recommend security technology solutions (firewall, EDR, DLP, CASB, IAM, SIEM, among others), ensuring effectiveness of controls; * Support infrastructure and systems projects, ensuring security requirements are incorporated from design and implementation phases; * Conduct security awareness campaigns and training for employees and partners; * Monitor cybersecurity trends, emerging threats, and technological innovations, proposing continuous improvements; * Act as a technical leader within the team, supporting mid-level and junior colleagues, sharing knowledge and best practices. 2512100202181911542