Analista de Segurança da Informação III - Foco Gestão de Riscos de Fornecedores

Conduct security risk assessments for suppliers and service providers by evaluating questionnaires, evidence, clauses, controls, policies, and action plans. Support business and supply chain units in contracting risk decisions while tracking vendor exceptions, renewals, and periodic re-evaluations. Contribute to TPRM process improvement, classification criteria, and governance by drafting clear risk opinions for stakeholders and revising security, privacy, and continuity contractual requirements. Create and review vendor security evaluation policies and criteria. The selection process may require a longer duration, concluding by the end of 2026.