Monitor and manage security controls in IT environments, identifying threats and proposing corrective measures.
Execute and coordinate responses to security incidents, including root-cause analysis and preventive actions.
Perform vulnerability assessments and penetration tests, identifying weaknesses and recommending improvements.
Implement and review information security policies, ensuring compliance with standards such as ISO 27001, LGPD and others.
Configure and monitor security tools such as firewalls, IDS/IPS and SIEM solutions.
Coordinate internal and external security audits and propose action plans to address non-conformities.
Maintain and update business continuity and disaster recovery plans, conducting periodic tests.
Develop security performance reports and metrics for senior management.
Support the review and adjustment of vendor contracts with respect to information security.
Train and guide employees on security best practices and compliance with corporate policies.

Bachelor's degree
Proficiency in network security and systems administration (Windows/Linux).
Experience with SIEM tools, firewalls, VPN, IDS/IPS and encryption.
Knowledge of vulnerability assessment and conducting penetration tests.
Knowledge of security frameworks such as ISO 27001, NIST or COBIT
Strong analytical and problem-solving skills to mitigate risks and propose effective solutions.
Ability to work independently and lead small projects within the security area.
Communication skills to interact with technical teams and managers at different levels.
Results-oriented with a focus on continuous improvement of security processes.
Commitment to confidentiality and ethics in handling sensitive data.
Proactive with a sense of urgency in responding to security incidents.

Preferred:

Information Security Analyst (Mid-level)

Key skills