TPCRM Specialist

Description

Job Summary: Work as an Information Security Specialist, developing and maintaining risk management policies and monitoring regulatory compliance in cybersecurity. Key Highlights: 1. Protect assets and information within one of the largest financial groups 2. Monitor compliance with regulations such as LGPD and ISO 27001 3. Conduct risk and compliance assessments for strategic partners **About Bradesco** Bradesco is one of Brazil’s largest financial groups, with a history marked by pioneering spirit and innovation. Through our broadly diversified portfolio of financial products, banking services, and insurance offerings, we contribute to individuals’ aspirations and to the sustainable growth of businesses and society. Join our financial ecosystem and impact the experience of millions of people! At Bradesco, we value diversity in all its forms. Therefore, our job openings are open to all individuals, regardless of gender, race, sexual orientation, disability, age, or any other characteristic. Learn more at https://banco.bradesco/html/classic/sobre/index.shtm **Responsibilities and Duties** What is our Cyber Security team? We are dedicated to protecting assets, information, and our employees. We proactively identify and mitigate risks, respond swiftly to incidents, and foster a culture of security across the entire organization. Our commitment is to the integrity, confidentiality, and availability of corporate resources, ensuring business continuity and customer trust. Work model: Hybrid \- 3 days onsite Unit: Osasco \- SP **What will your day\-to\-day look like?** As an Information Security Specialist I, you will work within the Cyber Security Management team, and your main responsibilities will include: * Developing and maintaining policies, standards, and procedures related to third\-party risk management * Monitoring and ensuring compliance with applicable regulations (e.g., LGPD, ISO 27001, NIST, BACEN, etc.) * Supporting internal and external audits by providing regulatory evidence and reports * Conducting risk and compliance assessments for suppliers and strategic partners * Participating in defining criteria for evaluating and classifying third\-party cyber risks * Promoting standardization of information security processes and controls applicable to third parties * Preparing management reports and dashboards for tracking regulatory indicators **Requirements and Qualifications** What do you need to have or know? * Completed undergraduate degree in fields such as Information Technology, Law, Business Administration, Engineering, or related disciplines * Prior experience in risk management, compliance, or information security * Knowledge of security frameworks (ISO 27001, NIST, COBIT, etc.) * Familiarity with national and international data protection and cybersecurity regulations It’s a plus if you have: * Postgraduate degree or certifications such as CISM, CRISC, ISO Lead Implementer/Auditor, DPO, etc. * Experience with GRC (Governance, Risk, and Compliance) tools * Intermediate or advanced English proficiency **What We Offer** At Bradesco, we value health and well\-being, offering an extensive portfolio of benefits to all our employees: * PLR or Bonus: Based on position eligibility\* * Health Insurance * Dental Insurance * Life Insurance * Food Allowance * Meal Voucher * 13th Food Basket * Total Pass * Transportation Voucher (optional enrollment) * Discounts on products and services from partner companies * Private Pension Plan (optional enrollment, with financial contribution from Bradesco Organization) * Bradesco Well\-Being Program: health, well\-being, and quality of life initiative * Unibrad: Bradesco Corporate University * Fee Waiver: special conditions on various products and services * Daycare or Babysitter Assistance * Extended Paternity Leave of 20 days * Maternity Leave of 180 days, including assisted prenatal and postnatal care