Security Analyst Sr.

Lead the full lifecycle of audit and vulnerability findings from identification to closure, ensuring SLA compliance and reducing average remediation time. Design and implement an AI-driven GRC automation strategy for evidence collection, continuous control monitoring, and operational efficiency. Maintain and operate the Information Security Management System (SGSI) under ISO 27001:2022, guaranteeing traceability and permanent auditability of the control catalog. Collaborate with Engineering, Product, and Technology teams to integrate risk and security controls early in project lifecycles, acting as the strategic liaison with the CISO Office. Develop security awareness programs and conduct control simulations to elevate internal GRC maturity.