Information Security Specialist

Description

Job Summary: An Information Security professional to define, implement, operate, and continuously improve security controls, reducing risks and ensuring compliance. Key Highlights: 1. Hands-on involvement in information security, from design to continuous improvement. 2. Opportunity to serve as a technical reference and collaborate with diverse departments. 3. Focus on innovation, security, and efficiency in the financial sector. **Nice to meet you — we are Evertec!** The **Evertec** is a company specializing in **technology for the financial sector**, with over 27 years of experience and presence in 26 countries across Latin America and the Caribbean. Processing over 11 billion transactions annually, we are a benchmark in solutions that drive digital transformation in the market. We offer a comprehensive portfolio of **software solutions**, serving financial institutions, enterprises, and fintechs seeking **innovation, security, and efficiency**. Our commitment lies in **technological excellence**, financial inclusion, and generating sustainable value for customers, employees, and partners — fostering a more connected and accessible ecosystem. Requirements: The **Information Security** team is responsible for safeguarding and promoting a security culture across the organization by applying technical and administrative controls to reduce the risk of data leakage involving employee and customer information. We seek an **Information Security Specialist** with strong technical expertise and an end-to-end vision of information security. This professional will work hands\-on to define, implement, operate, and continuously improve security controls, supporting risk reduction, regulatory compliance, and organizational security posture enhancement. The role requires solid technical knowledge across multiple information security disciplines, analytical capability, autonomy, and the ability to interact effectively with technical teams, business units, and external partners. **This position is responsible for:** * Operating, administering, and evolving technical information security controls across multiple layers (identity, endpoint, network, applications, cloud, and data). * Supporting and leading security incident response activities, including analysis, containment, eradication, investigation, and lessons learned. * Conducting vulnerability assessments, supporting remediation plans, and tracking remediation progress with responsible teams. * Supporting the definition, implementation, and monitoring of security policies, standards, and procedures. * Driving continuous improvement of the security posture by supporting hardening initiatives, attack surface reduction, and preventive controls. * Collaborating with SOC, infrastructure, cloud, development teams, and vendors to ensure technical alignment and control effectiveness. * Producing technical and executive reports on risks, incidents, vulnerabilities, and security metrics. * Supporting internal and external audits by providing technical evidence and clarifications regarding implemented controls. * Serving as a technical reference in Information Security for junior and mid-level analysts. **To \#match this role, candidates must meet the following mandatory requirements:** * Core information security principles (CIA triad, defense-in-depth, least privilege, zero trust). * Risk management and security controls. * Concepts of EDR/XDR and operating system hardening. * Identity and access management (IAM), multi-factor authentication (MFA), privileged access management (PAM). * Network security concepts, firewalls, WAF, IDS/IPS, segmentation, and microsegmentation. * Basic understanding of DDoS protection. * Fundamentals of cloud security (Azure and/or other cloud platforms). * Cloud security posture, policies, resource hardening, and access controls. * Application security concepts, OWASP Top 10, APIs. * Data protection, information classification, and basic DLP concepts. * Vulnerability management tools and processes. • Experience monitoring security events and responding to incidents. Proven experience in • Information Security, with technical and operational involvement. * Broad understanding of various information security domains. * Ability to work autonomously, organize tasks efficiently, and prioritize effectively. * Strong communication skills for interacting with both technical and non-technical stakeholders. **The following qualifications would be considered advantageous:** * Experience in regulated environments (financial sector, payment systems, etc.). * Knowledge of frameworks and standards such as ISO 27001, NIST, CIS. * Security certifications (Security\+, ISO 27001, CEH, CISSP, or similar). * Experience with hybrid and/or multi\-cloud environments. Benefits **So, does this resonate with you? Then let us tell you what you’ll find here — beyond a dynamic environment:** * Meal or food allowance; * Flexible benefit (Flash); * Health insurance; * Partners for psychological, legal, financial, and nutritional support (CLUDE, C4LIFE, and ASQ); * Psicologia Viva; * Dental insurance; * Childcare allowance; * Support for children with special needs; * Fertility assistance; * Extended maternity and paternity leave; * Transportation allowance or Home Office allowance (for remote contracts); * Gympass (Wellhub) and TotalPass; * Flexible working hours; * Life insurance; * Partnership club; * Sesc partnership; * Just dress no code (no dress code); * Birthday day off; * Beca (education incentive program); * PPR or Bonus — based on goal and result achievement. We value **diversity**, recognizing that varied ideas and perspectives truly enrich our organization. Therefore, race, color, religion, gender and gender identity, nationality, disability, sexual orientation, ancestry, or age will not prevent you from joining our team.