Cybersecurity Senior Analyst

Mars; Jacareí; On-site; BRL 180,000 - 320,000; Full time

Job summary

Mars is seeking a Cybersecurity Senior Analyst for Mars Digital Technologies in the Guararema area to lead security on onboarding acquisitions and segment initiatives. You will bridge strategic security planning with technical deployment and governance, ensuring robust control coverage across acquisition environments and guiding multi-phase roadmaps.

The role requires 3–5+ years in cybersecurity, strong knowledge of security controls, and experience with M&A security integration.

Qualifications

• Bachelor’s degree in computer science, IT, Cybersecurity, or equivalent.
• Certifications such as Security+, CISM, CRISC, CISSP; PMP/PMI-ACP/Agile/Scrum preferred.
• 3–5+ years in Cyber Security, Information Security PM, or IT Risk/Compliance.
• Experience with security integrations, M&A onboarding, or deployments across distributed environments.
• Knowledge of security controls across Windows/Linux, cloud, network, and IAM.
• Familiarity with NIST CSF, ISO 27001, and ITIL principles.
• Proven cross-functional project management and change management capabilities.
• Strong communication and executive presentation skills.

Responsibilities

• Lead security control assessments across acquisitions to ensure baseline coverage.
• Develop and maintain multi-phase security roadmaps with acquisition leadership.
• Oversee deployment of security tools and governance across environments.
• Embed compliance with Mars security policies and regulatory frameworks.
• Identify and escalate security/compliance gaps; manage remediation.
• Formalize action plans with owners and milestones in risk register.
• Align segment and global cyber risk with enterprise risk tolerance.
• Lead cyber security governance forums across segments and acquisitions.
• Collaborate with GRC to adopt standardized tools and templates.
• Define security change management strategies to drive adoption.
• Liaise between GDO, regional teams, leadership, and acquisition personnel.
• Manage projects deploying security controls and programs.

Skills

Cybersecurity

Project management

Risk management

Communication

Stakeholder engagement

Education

Bachelor's degree in computer science or related field

Job description

Job Description:

Cybersecurity Senior Analyst | Mars Digital Technologies | Guararema

The Segment Security Cybersecurity Senior Analyst plays a pivotal role in protecting and enabling Mars Segment & business unit growth initiatives. This role bridges strategic security planning, technical deployment, and governance by overseeing the onboarding and integration of new acquisitions and segment initiatives.

The primary mission is to ensure robust security control coverage across all acquisition environments, co-create strategic security roadmaps, drive compliance embedding and remediation governance, and facilitate end-to-end cyber governance and project delivery across business units and acquired entities. This is an exciting opportunity to contribute to Mars Snacking mission while advancing your career in cybersecurity.

What will be your key responsibilities?

• Security Control Assessment & Coverage: Lead comprehensive evaluations of existing architectures, systems, and processes across acquired business units to ensure full baseline security control coverage (e.g., identity, endpoint, perimeter, vulnerability management, cloud).
• Strategic Roadmap Development: Partner closely with acquisition leadership, business unit stakeholders, and the Cyber Security Director to co-create, prioritize, and maintain tailored multi-phase security roadmaps for onboarding and integration.
• Control Deployment Oversight: Manage and oversee the technical implementation and operational rollout of enterprise security tools, services, and fit‑for‑purpose capability models across acquisitions and segment environments.
• Compliance Embedding: Ensure segment‑wide and acquisition alignment with Mars global security policies, standards, and regulatory frameworks (e.g., NIST CSF).
• Risk Management - Gap Identification & Escalation: Proactively identify, assess, and document compliance gaps and architectural deficiencies during onboarding and ongoing assessments; elevate critical security and compliance risks to segment leadership and the Cyber Security Director.
• Risk Management - Action Plans & Risk Ownership: Formalize remediation action plans with clear ownership, target completion milestones, and tracking mechanisms within the enterprise risk register, ensuring business unit accountability.
• Risk Management – Connect Segment Enterprise Risk Management risks with the global cyber risks ensuring risk response is consistent and aligned with enterprise risk tolerance levels.
• Governance Facilitation: Organize and lead regular cyber security governance forums and reviews across segments and acquisitions to report on integration maturity, open vulnerabilities, and compliance milestones.
• GRC Collaboration: Partner with the central Governance, Risk, and Compliance (GRC) team to adopt and operationalize standardized tools, reporting templates, and risk treatment protocols across business units.
• Change Enablement: Define and implement security change management strategies that drive adoption, reduce operational disruption, and support and champion security‑first culture across Mars Segments & acquisitions.
• Stakeholder Engagement: Serve as the primary liaison between Global Digital Operations (GDO), regional digital teams, segment leadership, and acquisition personnel, translating technical risks into clear business implications.
• Project Management: Bring solid organization, structure, and governance to small and medium sized projects deploying security controls and/or security program initiatives that support the Segment Security mission and strategy.

Qualifications:

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field (or equivalent practical experience).
• Preferred Certifications: Security certifications such as CompTIA Security+, CISM, CRISC, CISSP, or project management certifications (PMP, PMI-ACP, Agile/Scrum) are strongly preferred.
• Experience: 3–5+ years of experience in Cyber Security, Information Security Project Management, or IT Risk and Compliance roles.
• M&A / Acquisition Security: Demonstrated experience or strong familiarity with security integrations, M&A due diligence/onboarding, or technical control deployments in distributed enterprise environments.
• Security Controls & Architecture: Strong fundamental knowledge of security controls across enterprise operating platforms (Windows, Linux), cloud infrastructure, network architecture, and identity/access management (IAM).
• Frameworks & Standards: Familiarity with industry security standards and frameworks (NIST CSF, ISO 27001) and IT Service Management / ITIL principles.
• Project & Change Management: Proven track record of managing technical cross‑functional projects, managing conflicting priorities, and applying change management principles to drive technology adoption.
• Communication & Influencing: Strong analytical, communication, and executive presentation skills with the ability to articulate risk, build consensus, and influence stakeholders across both technical and business functions.

What can you expect from Mars?

Work with diverse and talented Associates, all guided by the Five Principles.
Join a purpose driven company, where we’re striving to build the world we want tomorrow, today.
A strong focus on learning and development support from day one, including access to our in-house Mars University.
An industry competitive salary and benefits package, including company bonus.

#TBdigital

#Onsite