Senior Information Security Specialist

Description

**Key Responsibilities** * Structure the Information Security function, defining strategy, operational model, roles, responsibilities, and evolution roadmap. * Develop, implement, and maintain Information Security policies, standards, and procedures. * Lead the Risk Management program, including risk identification, assessment, treatment, and monitoring. * Support compliance with frameworks and regulations such as **ISO/IEC 27001, LGPD, NIST CSF, and CIS Controls**. * Define and monitor security controls related to identity and access, networks, endpoints, cloud environments, and data protection. * Coordinate vulnerability management and security incident response processes. * Promote information security awareness initiatives and culture. * Assess security risks associated with suppliers and third parties. * Support projects from inception, applying **Security by Design** principles. * Define metrics (KPIs/KRIs), prepare executive reports, and track security maturity progress. * Document processes and ensure adoption of governance best practices. **Professional Profile** We seek a **Senior Information Security Specialist**, with experience in building information security functions and implementing GRC programs, operating both strategically and operationally. **Technical Requirements** * Experience implementing and evolving Information Security and GRC programs. * Proficiency in **ISO/IEC 27001, NIST CSF, CIS Controls, and LGPD**. * Solid knowledge of risk management, vulnerability management, incident response, and security policy development. * Experience in cloud environment security, identity and access management (IAM), network security, and data protection. * Ability to define metrics, indicators, and continuous improvement plans. **Behavioral Competencies** * Analytical and strategic mindset. * Excellent communication skills with technical and executive teams. * Autonomy, organization, and sense of priority. * Technical leadership capability and influence in decision-making. * Continuous improvement orientation and results focus. Compensation: R$14\.000,00 \- R$17\.000,00 per month Work Location: Remote