Cybersecurity Senior Analyst

Mars; Guararema; On-site; BRL 180,000 - 260,000; Full time

Job summary

Mars Digital Technologies in Guararema seeks a Cybersecurity Senior Analyst to protect and enable business growth through strategic security planning, onboarding of acquisitions, and governance across segments. You will drive alignment with global policies, manage risk, and implement security programs during integration.

Qualifications include a CS/IT/Cybersecurity degree, 3–5+ years in cyber/risk roles, and strong communication skills for executive presentations.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or equivalent practical experience.
• Security certifications such as Security+, CISM, CRISC, CISSP, or PMP/PMI-ACP are strongly preferred.
• 3–5+ years in Cyber Security, Information Security PM, or IT Risk & Compliance.
• M&A/acquisition security experience with onboarding/integration in distributed enterprises.
• Strong knowledge of security controls across Windows/Linux, cloud, network, IAM.
• Familiarity with NIST CSF, ISO 27001 and ITIL principles.
• Proven ability to manage cross-functional projects and drive change.

Responsibilities

• Lead security control assessments to ensure baseline coverage across acquisitions.
• Co-create multi-phase security roadmaps with acquisition leadership and stakeholders.
• Oversee deployment of security tools and capability models across environments.
• Embed compliance with Mars policies, standards, and regulatory frameworks.
• Identify and document risk gaps; escalate to segment leadership with remediation plans.
• Formalize remediation actions with owners and milestones in the enterprise risk register.
• Coordinate governance forums to report on integration maturity and milestones.

Skills

Security governance

Risk assessment

M&A security

IAM

Cloud security

IT risk & compliance

Security controls

Project management

Communication

Change management

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Job description

Cybersecurity Senior Analyst | Mars Digital Technologies | Guararema

The Segment Security Cybersecurity Senior Analyst plays a pivotal role in protecting and enabling Mars Segment & business unit growth initiatives. This role bridges strategic security planning, technical deployment, and governance by overseeing the onboarding and integration of new acquisitions and segment initiatives. The primary mission is to ensure robust security control coverage across all acquisition environments, co-create strategic security roadmaps, drive compliance embedding and remediation governance, and facilitate end-to-end cyber governance and project delivery across business units and acquired entities. This is an exciting opportunity to contribute to Mars Snacking mission while advancing your career in cybersecurity.

What will be your key responsibilities?

• Security Control Assessment & Coverage: Lead comprehensive evaluations of existing architectures, systems, and processes across acquired business units to ensure full baseline security control coverage (e.g., identity, endpoint, perimeter, vulnerability management, cloud).
• Strategic Roadmap Development: Partner closely with acquisition leadership, business unit stakeholders, and the Cyber Security Director to co-create, prioritize, and maintain tailored multi-phase security roadmaps for onboarding and integration.
• Control Deployment Oversight: Manage and oversee the technical implementation and operational rollout of enterprise security tools, services, and fit-for-purpose capability models across acquisitions and segment environments.
• Compliance Embedding: Ensure segment-wide and acquisition alignment with Mars global security policies, standards, and regulatory frameworks (e.g., NIST CSF).
• Risk Management - Gap Identification & Escalation: Proactively identify, assess, and document compliance gaps and architectural deficiencies during onboarding and ongoing assessments; elevate critical security and compliance risks to segment leadership and the Cyber Security Director.
• Risk Management - Action Plans & Risk Ownership: Formalize remediation action plans with clear ownership, target completion milestones, and tracking mechanisms within the enterprise risk register, ensuring business unit accountability.
• Risk Management - Connect Segment Enterprise Risk Management risks with the global cyber risks ensuring risk response is consistent and aligned with enterprise risk tolerance levels.
• Governance Facilitation: Organize and lead regular cyber security governance forums and reviews across segments and acquisitions to report on integration maturity, open vulnerabilities, and compliance milestones.
• GRC Collaboration: Partner with the central Governance, Risk, and Compliance (GRC) team to adopt and operationalize standardized tools, reporting templates, and risk treatment protocols across business units.
• Change Enablement: Define and implement security change management strategies that drive adoption, reduce operational disruption, and support and champion security-first culture across Mars Segments & acquisitions.
• Stakeholder Engagement: Serve as the primary liaison between Global Digital Operations (GDO), regional digital teams, segment leadership, and acquisition personnel, translating technical risks into clear business implications.
• Project Management: Bring solid organization, structure, and governance to small and medium sized projects deploying security controls and/or security program initiatives that support the Segment Security mission and strategy.

Qualifications

• Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field (or equivalent practical experience).
• Preferred Certifications: Security certifications such as CompTIA Security+, CISM, CRISC, CISSP, or project management certifications (PMP, PMI-ACP, Agile/Scrum) are strongly preferred.
• Experience: 3-5+ years of experience in Cyber Security, Information Security Project Management, or IT Risk and Compliance roles.
• M&A / Acquisition Security: Demonstrated experience or strong familiarity with security integrations, M&A due diligence/onboarding, or technical control deployments in distributed enterprise environments.
• Security Controls & Architecture: Strong fundamental knowledge of security controls across enterprise operating platforms (Windows, Linux), cloud infrastructure, network architecture, and identity/access management (IAM).
• Frameworks & Standards: Familiarity with industry security standards and frameworks (NIST CSF, ISO 27001) and IT Service Management / ITIL principles.
• Project & Change Management: Proven track record of managing technical cross-functional projects, managing conflicting priorities, and applying change management principles to drive technology adoption.
• Communication & Influencing: Strong analytical, communication, and executive presentation skills with the ability to articulate risk,