Analyst supporting the execution of PCI DSS compliance controls and procedures at AuditSafe. Collaborating on audits, GAP analyses, and security requirements implementation.
About the role
- Assistente/Analista de Segurança da Informação focusing on GRC initiatives at AuditSafe in São Paulo. Supporting security controls, risk management, and documentation processes.
Responsibilities
- Execute compliance checklists based on frameworks such as NIST, ISO 27001 and ISO 27701
- Support projects to develop and review Segregation of Duties (SoD) and Role-Based Access Control (RBAC)
- Keep records, controls and incident reports up to date
- Assist in updating Information Security policies, standards and procedures
- Perform document management activities for the area
- Assist in tracking action plans resulting from gap analyses
- Support the mapping of basic Information Security risks
- Contribute to knowledge sharing with junior staff in the team
- Support user awareness campaigns on Information Security
- Provide suggestions for process improvements within the area
- Support activities related to Business Continuity Management (BCM), such as organizing documents, controls, plans and follow-ups
Requirements
- Degree in Information Technology, Information Security or related fields (in progress or completed)
- Basic knowledge of network fundamentals and security
- Understanding of Information Security, governance, risk and compliance concepts
- Introductory knowledge of frameworks and standards such as ISO 27001, NIST and LGPD
- Basic knowledge of risk management
- 0 to 2 years of experience in GRC or related areas
- Knowledge of ITIL
Benefits
- Meal and/or food allowance
- Home office allowance
- Birthday day off + extra credit on flexible benefits card
- Health insurance
- Dental insurance
- Access to TotalPass (wellness, gyms and quality-of-life services)
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Location requirements
Consultant assisting clients in risk management within Adveez Consulting's IT department. Responsibility for system design, implementation, and compliance monitoring.
Regulatory Affairs Manager coordinating regulatory submissions and compliance for Patient Assistance Programs in Brazil. Collaborating with stakeholders on program execution while ensuring ethical standards.
Regulatory Affairs Manager specializing in food industry compliance across US/North America. Leading regulatory strategies and communication for food ingredients and products.
Compliance Analyst participating in financial compliance processes at Prex. Utilizing data analysis for risk identification and maintaining regulatory compliance.
Control, Risk and Compliance Analyst at Desjardins managing compliance for savings and investment products. Preparing reports and liaising with stakeholders to ensure regulatory compliance and operational risk management.
Senior Manager leading technology - enabled GRC solutions and guiding compliance frameworks. Collaborates with teams to ensure scalable and practical implementations for Crowe's regulatory practices.
Alternant en conformité réglementaire chez Sanofi, contribuant à la conformité mondiale des activités de santé. Collaborant avec une équipe pour développer compétences tout en soutenant l'avenir de la santé.
Environmental Professional ensuring air compliance and permit management for oil and gas operations. Collaborating with teams on compliance, reporting, and regulatory issues across various states.
Senior Audit & Compliance Specialist developing audit schedules and conducting audits in insurance sectors. Collaborating with teams to drive quality improvements across claims procedures and training.