Information Security Risk & Compliance Analyst supporting the maintenance of ISO 27001 standards. Contributing to risk assessments and compliance across AAB’s Business Protection Team.
About the role
- Security Engineer implementing security controls and risk analyses for cloud environments at UOL EdTech. Collaborating with development teams for secure coding practices and compliance.
Responsibilities
- Implement and monitor security controls in AWS and Azure environments.
- Ensure cloud resources comply with defined security standards and policies.
- Automate security checks using native cloud tools and scripts.
- Perform regular scans of systems and applications to identify vulnerabilities.
- Prioritize, report, and follow up on remediation with the responsible teams.
- Conduct risk analyses related to identified vulnerabilities and propose action plans.
- Collaborate with development teams to ensure secure coding practices.
- Deploy and manage WAF solutions to protect against threats.
- Apply controls from frameworks such as NIST, CIS Controls and ISO 27001 to structure and review security measures.
- Contribute to the definition and update of security policies and standards.
- Monitor security events and investigate related incidents.
- Propose and implement improvements to detection and response processes.
Requirements
- Bachelor's degree (completed or in progress) in Information Security or related fields.
- Experience with networking, firewalls and support of security solutions.
- Proficiency with frameworks such as NIST CSF, CIS Controls and ISO 27001.
- Knowledge of TCP/IP network infrastructure, SIEM (Google SecOps), digital certificates, network protocols, firewalls and WAF.
- Experience in Application Security, including static and dynamic code analysis.
- Availability to work in a hybrid model (3 days per week) in São Paulo, SP.
Benefits
- Meal and/or food allowance.
- Health and dental insurance.
- Life insurance.
- Access to benefits through partnerships with TotalPass and ZenKlub.
- Extended maternity and paternity leave.
- Childcare assistance.
- Up to 50% discounts on postgraduate and MBA programs from leading institutions such as FIA, FAAP and PUCRS.
- No dress code: wear what makes you feel comfortable.
- Birthday perk: day off on your birthday.
- Baby gift for newborns.
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Information Security Risk & Compliance Analyst at AAB managing compliance with ISO 27001, supporting enterprise risk assessments and enhancing information security systems.
Information Security Risk & Compliance Analyst at AAB focusing on ISO 27001 compliance and information security management. Collaborating across teams to ensure robust risk and compliance frameworks.
Security Principal at Optiv designing AI security solutions for clients, leveraging advanced security services and technologies. Driving pipeline generation and maintaining strong client relationships as a trusted advisor.
Cloud Security Architect supporting federal customer projects focused on architecture and security solutions. Conducting risk assessments and defining security requirements within a cloud environment.
Information Security Specialist responsible for enhancing cybersecurity posture through incident management and compliance. Collaborating with cross - functional teams to monitor threats and implement security measures.
Senior Lead Info Security Architect leading and collaborating on cybersecurity solutions at TIAA. Responsible for secure design and implementation of cloud security strategies and practices.
Part Time Security Officer providing protection for Collector's personnel and assets at trade shows across North America while reporting to Security Shows & Transportation Manager.
Enterprise Security Architect at PBCN GmbH designing and implementing security architectures. Collaborating with teams to ensure application security and conducting risk assessments.
IT & Security Manager at Medenterprises managing technology and cybersecurity for healthcare professionals in Australia and New Zealand. Leading strategic initiatives and infrastructure to enhance security posture.