Description
We are Grupo Casas Bahia, with over 70 years of history, fulfilling the dreams of \+100 million Brazilians.
Here, we are protagonists all the time, always with integrity and ethics in everything we do. The passion for our people is what drives us, and total dedication to the customer is our daily commitment. We deliver results and always seek simplicity in everything we do!
We are looking for an Information Security Specialist to join the Compliance squad of the GRC Tribe, in the Digital Security Directorate, with a focus on Audits. This person will be the main reference for audit demands related to Technology, acting as a link between business areas, technology, audit, and other stakeholders.
They will be responsible for coordinating and orchestrating internal, external, and regulatory audits, ensuring the timely fulfillment of requests, the quality and consistency of the evidence presented, as well as monitoring the execution of the resulting action plans. They must act in the orchestration of the involved fronts, in the assessment of control adherence, in the monitoring of the evolution of recommendations, and in strengthening Information Security compliance.
We are looking for someone with strong articulation, organization, and influence skills, who acts collaboratively to connect different areas, promote continuous improvement of controls, and contribute to a solid culture of governance, compliance, and risk management.
**Responsibilities and attributes**
* Be the audit focal point for the Technology area, orchestrating internal, external, and regulatory audit demands with business and technology teams;
* Articulate and monitor the fulfillment of audit requests, ensuring deadlines, quality, and traceability of deliverables;
* Collect, organize, and validate control evidence with the responsible areas, ensuring documentation consistency;
* Support GAP assessments and the evaluation of control adherence to frameworks and regulatory requirements (ISO 27001, NIST CSF, CIS Controls, LGPD).
* Consolidate findings, recommendations, and fulfillment status for technical teams, managers, and the Digital Security Directorate;
* Define, negotiate, and monitor action plans with the responsible areas until the closure of non-conformities;
**Requirements and qualifications**
* Completed higher education in Information Security, Information Technology, Accounting, Engineering, or related fields.
* Experience in compliance, audit fulfillment, internal controls, or GRC in technology environments.
* Knowledge of market frameworks and standards (ISO 27001/27002, NIST CSF, CIS Controls, COBIT).
* Experience with evidence management, control assessment, and action plan monitoring.
* Familiarity with LGPD and regulatory requirements applicable to the retail sector.
Strong articulation and communication skills with multiple areas, organization, and attention to detail.
*
**It would be great if you had (differential):**
* certifications such as CISA, ISO 27001 Lead Auditor, CRISC, or CISM.
**Additional information** **Check out some of the incredible benefits we have prepared to ensure your well-being and quality of life:**
* **PLR/Bonus**: An extra recognition to value your effort and dedication!
* **Medical and Dental Assistance**: So that you have all the security and care for your health and your family's.
* **Meal Voucher**: Because we know that quality nutrition is essential for your daily life!
* **Life Insurance**: Peace of mind and protection for you and your loved ones.
* **Extended Maternity Leave**: 180 days for our mothers to enjoy the best moment with their baby!
* **Extended Paternity Leave**: 20 days so that fathers can also be present in the first days of life.
* **Physical Activity Incentive**: Access Wellhub (Gympass) and Total Pass to take care of your health and keep your body moving.
* **Transport Voucher**: To ensure that your commute to work is smooth and worry-free.
* **Partnership with SESC**: Enjoy incredible benefits in culture, leisure, health, and much more!
* **Discount Club**: To take advantage of discounts of up to 70% on products and services with more than 2\.000 partners in Brazil and Latin America!
* **Day-off on Birthday**: To celebrate your day with more tranquility and fun, you are entitled to a rest on your birthday!
* **Pharmacy Discounts:** Exclusive discounts on medications for you to save on health care!
**Our commitment is to provide not only a work environment but also an experience that values and cares for you as a person! We are here to support your personal and professional growth.**
**\#VEMPROGRUPOCASASBAHIA**
**All our opportunities are open to internal and external candidates**.
**Collaborative people**, do not fail to access our internal recruitment policy on **Service Now** to check the requirements and premises of the program.
*Grupo Casas Bahia is one of the most emblematic companies in Brazil, with a rich history that spans decades. Your journey is marked by overcoming challenges, innovation, and total dedication to you! Our dedication is tireless, our willingness to bring solutions, and to talk eye to eye makes us human.*
*We are more than 30,000 collaborators, with the largest and most digital logistics network in Brazil connected to more than a thousand physical stores, 29 distribution centers, delivery hubs, all this thinking of more than 200 million customers.*
*If you are driven by passion, by the simple way of being, by transformation, and by the dedication we have for you and all Brazilians, we welcome you, feel at home, and get to know our career opportunities at Grupo Casas Bahia.*