Structure, implement and evolve cybersecurity governance processes;
Define, maintain and review information security policies, standards and procedures;
Manage cyber risks by identifying, assessing, treating and monitoring risks;
Structure and enhance processes related to: Vulnerability Management, Security Incident Management, Asset Management, and Compliance Management;
Ensure adherence to key security frameworks and best practices, such as ISA/IEC 62443 and NIST;
Define, monitor and report performance and risk indicators (KPIs and KRIs);
Prepare technical and executive reports to track security maturity and risks.

Experience with policies, standards, audits and compliance processes in Information Security;
Knowledge of security frameworks and standards such as NIST, ISO 27001, ISA/IEC 62443 (desirable);
Familiarity with security tools such as SIEM, EDR and security monitoring platforms;
Strong communication skills, analytical mindset and business awareness;
Ability to interact with technical teams and business areas.

Mid-level Information Security Analyst

Key skills