Cybersecurity Assistant

Jobtailor; Vitória; Presencial; BRL 80 000 - 120 000; Tempo integral

Resumo da oferta

Jobtailor in Vitória, ES, Brazil is seeking an Information Security Analyst to support policy implementation, monitoring, and incident response within NIST and ISO 27001 frameworks.

The role focuses on vulnerability management, access controls in Microsoft environments, and collaboration with cross-functional teams to promote security best practices and compliance across projects.

Qualificações

• Bachelors in CS/Info Security or related field, in progress or completed.
• Strong written and verbal communication to translate technical topics.
• Analytical, proactive and capable of problem solving.
• Comfortable in multidisciplinary teams and managing concurrent projects.
• Experience in technology teams with cybersecurity exposure.
• Nice-to-have: NIST/ISO27001 knowledge, PM experience, IT audit exposure, MS environment skills, relevant certs, monitoring and IR experience.

Responsabilidades

• Support development and updating of information security policies and standards.
• Assist in monitoring projects and identifying security requirements.
• Support vulnerability assessments and audit evidence collection.
• Assist monitoring of events and incident handling per procedures.
• Support access management and Microsoft environment controls.
• Contribute to security training and awareness initiatives.
• Prepare reports and documentation on risks, vulnerabilities and actions.
• Keep records up to date and ensure traceability.
• Monitor cyber security trends and share insights with the team.
• Provide support to internal teams and vendors for security requests.

Conhecimentos

Communication skills

Analytical thinking

Cybersecurity experience

Project management

Information security

Team collaboration

Security awareness

Formação académica

Bachelor's degree in Computer Science/Engineering or Information Security

Ferramentas

Monitoring tools

Vulnerability management

Incident response

Azure AD

Microsoft 365

Active Directory

Descrição da oferta de emprego

Responsibilities

• Support the implementation, updating and organization of information security policies, standards and procedures, following guidelines from the NIST and ISO 27001 frameworks;
• Assist in monitoring technology projects, contributing to the identification of security requirements and tracking the actions defined;
• Support vulnerability assessments, collection of evidence for internal and external audits, and updating security metrics/indicators;
• Assist in monitoring events and in the recording, triage, and follow-up of information security incidents, escalating situations according to established procedures;
• Support access management activities, permission reviews, and execution of compliance controls in Microsoft environments (Azure AD, Microsoft 365, among others);
• Contribute to the planning and delivery of training, awareness campaigns, and initiatives to promote information security best practices;
• Assist in the preparation of reports, controls, and technical documentation related to projects, risks, vulnerabilities, and action plans;
• Keep records and documentation up to date, ensuring traceability of activities and compliance with internal processes;
• Monitor trends, vulnerabilities, and best practices in cyber security, sharing relevant information with the team;
• Provide support to internal teams and vendors for information security‑related requests, following guidance from the technical team.

Requirements

• Bachelor's degree completed or in progress in Computer Science, Computer Engineering, Information Systems, Information Security, or related fields;
• Strong verbal and written communication skills, with the ability to translate technical topics for diverse audiences;
• Analytical, proactive, and problem‑solving mindset;
• Comfortable working in multidisciplinary teams and managing multiple concurrent projects;
• Experience working in technology teams with exposure to cybersecurity;
• You will stand out if you have:
  • Practical knowledge of the NIST and/or ISO 27001 frameworks;
  • Project management experience;
  • Previous experience in information security projects or IT audit;
  • Experience in Microsoft environments (Azure, M365, Active Directory);
  • Relevant certifications (e.g., CompTIA Security+, ISO 27001 Foundation, Microsoft Security);
  • Experience with monitoring tools, vulnerability management, and incident response.

Core Competencies

Demonstrates expertise in implementing and managing information security policies and standards, particularly within NIST and ISO 27001 frameworks. Proficient in vulnerability assessments, incident response, and compliance controls in Microsoft environments.