Analista de Segurança da Informação III - Gestão de Riscos Cibernéticos

Identify, register, and track security risks, issues, non-conformities, and action plans. Support adherence assessments to norms, internal policies, frameworks, and regulatory requirements. Produce risk analyses, opinions, and reports for leadership, committees, and responsible areas. Monitor deadlines, owners, evidence, and effectiveness of mitigation plans. Contribute to improving cyber risk governance processes. Support internal, external, regulatory, and fiscalization audits. Integrate incident, vulnerability, third-party, IAM, AppSec, and architecture data for a consolidated risk view. Act preventively in initiatives by identifying security risks and proposing controls before production entry. Define, track, and report indicators measuring risk exposure and control effectiveness. The selection process may require a longer duration, concluding by the end of 2026. Candidates need a higher education degree in Administration, Systems Analysis, Computer Science, or Information Systems, along with experience in risk, compliance, governance, or internal audit.