Senior Information Security Analyst | Risk and Projects

Description

Job Summary: Serve as an Information Security consultant, acting as a strategic bridge between Security governance and Business and Product areas—assessing risks and recommending guidelines. Key Highlights: 1. Collaborate synergistically with Business and Product verticals 2. Single point of contact for innovation, agility, resilience, and product security 3. Growth opportunities and a welcoming, safe environment At **Porto**, we don’t just care about businesses: **we are the safe harbor for the lives and dreams of millions of people.** As one of Brazil’s most valuable and admired brands, we unite innovation, technology, and collaboration to go beyond. We believe our strength lies in **diversity**. We seek unique talents with diverse backgrounds, cultures, genders, ethnicities, disabilities, and perspectives. We don’t want people who simply “fit” our culture. **We want you—to transform and evolve with us!** What does **Porto’s Information Security Management** do? You will join the **Information Security Consulting team**, operating on the front line and in direct synergy with our **Business and Product verticals**. Your key role will be to serve as a **strategic bridge** between Security governance and the teams building our solutions. On a day-to-day basis, you will provide consulting support—from new project conception through to final delivery. You will help translate technical and regulatory security requirements into practical business guidance, assessing risks, recommending directives (e.g., IAM, encryption, data protection), and overseeing control implementation. You will be the focal point ensuring our products grow with innovation, agility—and above all—resilience and security. **\#JoinPorto \#InformationSecurity** **\#InfoSec** **Responsibilities and Duties** * Assess threats and define necessary security requirements for implementing new business initiatives; * Monitor the development lifecycle (security pipeline), verifying compliance with requirements and reporting technical debt or non-conformities to Cyber Risk; * Conduct risk assessments of vendors and new market solutions, issuing technical opinions; * Advise Business verticals on identifying execution gaps, opportunities for continuous improvement, and mitigation of uncovered risks; * Ensure that IT products and processes across verticals are properly protected by institutional InfoSec tools. **Requirements and Qualifications** * Bachelor’s degree in Information Security, Information Technology, or related fields; * Solid experience in SI projects, technical needs analysis, requirement validation, and vulnerability management (including ability to develop and present metrics); * Proficiency in security frameworks, data protection laws, continuous improvement, and hands-on experience with SOC and CSIRT ecosystems; * In-depth knowledge of IT and Telecom infrastructure (Datacenter, Firewall, VPN, Proxy, IPS/UTM, NAC); * Practical expertise in defense and monitoring solutions (WAF, Antivirus, SIEM, XDR, DDoS Protection, DLP, Cisco Umbrella, Prisma Cloud) and cloud security (AWS, GCP, or Azure). **Additional Information** **Porto Benefits:** * **Flexible Food and Meal Allowances**; * **Health and Dental Plans (with Odontox)**; * **Wellhub and TotalPass**; * **Exclusive Bio Ritmo Gym for Employees: at Matriz Complex**; * **Profit Sharing (PLR)**; * **Stock Program: Porto em Ação—complementary to PLR until 2030**; * **Sand and Multipurpose Courts: at Matriz Complex**; * **Music Studio**; * **Transportation Allowance**; * **Van Transportation Services—available at major access stations to Porto (Luz, Barra Funda, Santa Cecília, and Júlio Prestes)**; * **Extended Parental Leave: up to 40 days for all family configurations**; * **Extended Maternity Leave: 6 months**; * **Medical Outpatient Clinic with Specialties (at Matriz and Barra Funda Complexes)**; * **Childcare or Babysitter Assistance**; * **Life Insurance**; * **Private Pension Plan—PortoPrev**; * **Discounts on Products and Services**; * **Scholarship Program: Reimbursement for undergraduate, graduate, or MBA studies**; * **Monthly Running Events: subsidy for major São Paulo street races**; * **Language Reimbursement (English or Spanish)**; * **Teatro Porto: exclusive sessions for Employees**; * **Library**; * **Rest Room: at Matriz Complex**; * **Game Room: at Matriz Complex**; * **Massage and Podiatry Services: at Matriz Complex**; * **Work Location: On-site (We operate hybrid models, which will be discussed during the selection process)**; Porto is much more than an insurance company: it is a vast ecosystem leveraging technology to create solutions across four business verticals: **Porto Bank, Porto Saúde, Porto Seguro, and Porto Serviço**. Our reputation and recognition, earned over 80+ years, reflect Porto’s scale—a business reference built by and for people. Here, 13,000 employees proudly belong to a **solid, ethical organization that transforms dreams into fantastic realities** for our 18+ million customers. We operate across 101+ branches and regional offices nationwide. Learning is part of our DNA, and here you’ll find **incentives, tools, and great people to learn and grow every day**, in a welcoming, safe environment where everyone can be—and take pride in being—who they are, fostering respect and **living fully and well within a genuinely human company.** **DIVERSITY & INCLUSION AT PORTO** At Porto, we value diversity and believe a plural team is essential to developing our entire business, society, and each individual—because we understand that every person is unique in building a more innovative and inclusive environment. Together, we work daily to build a safe, free, and welcoming space—with greater plurality and respect. Therefore, **we strongly encourage applications from women, Black and Indigenous people, people with disabilities, and LGBTQIA+ individuals** for all our openings.