Information Security Analyst (Mid-level)

Jobtailor; São Paulo; Presencial; BRL 120 000 - 240 000; Tempo integral

Resumo da oferta

Jobtailor in São Paulo is seeking an experienced information security professional to oversee security controls across IT environments and coordinate incident responses.

You will perform vulnerability assessments, lead penetration tests, implement ISO 27001 and LGPD-aligned policies, configure security tools, and present security metrics to senior management.

Qualificações

• Bachelor's degree in a related field.
• Experience with network security and systems administration (Windows/Linux).
• Experience with SIEM, firewalls, VPN, IDS/IPS and encryption.
• Knowledge of vulnerability assessment and penetration testing.
• Knowledge of ISO 27001, NIST or COBIT frameworks.
• Strong analytical and problem-solving skills.
• Ability to work independently and lead small projects.
• Good communication with diverse teams.
• Security-conscious with proactive incident response.

Responsabilidades

• Monitor and manage security controls in IT environments.
• Coordinate responses to security incidents, including root-cause analysis.
• Perform vulnerability assessments and penetration tests.
• Implement and review information security policies per ISO 27001 and LGPD.
• Configure and monitor security tools (firewalls, IDS/IPS, SIEM).
• Coordinate audits and address non-conformities.
• Maintain business continuity and disaster recovery plans.
• Develop security metrics for senior management.
• Review vendor contracts for information security.
• Train employees on security best practices and policies.

Conhecimentos

Network security

Windows/Linux admin

SIEM

Firewalls

VPN

IDS/IPS

Encryption

Vulnerability testing

Penetration testing

ISO 27001

NIST

COBIT

Analytical skills

Project leadership

Communication

Confidentiality

Formação académica

Bachelor's degree

Descrição da oferta de emprego

Responsibilities

• Monitor and manage security controls in IT environments, identifying threats and proposing corrective measures.
• Execute and coordinate responses to security incidents, including root-cause analysis and preventive actions.
• Perform vulnerability assessments and penetration tests, identifying weaknesses and recommending improvements.
• Implement and review information security policies, ensuring compliance with standards such as ISO 27001, LGPD and others.
• Configure and monitor security tools such as firewalls, IDS/IPS and SIEM solutions.
• Coordinate internal and external security audits and propose action plans to address non-conformities.
• Maintain and update business continuity and disaster recovery plans, conducting periodic tests.
• Develop security performance reports and metrics for senior management.
• Support the review and adjustment of vendor contracts with respect to information security.
• Train and guide employees on security best practices and compliance with corporate policies.

Requirements

• Bachelor's degree
• Proficiency in network security and systems administration (Windows/Linux)
• Experience with SIEM tools, firewalls, VPN, IDS/IPS and encryption
• Knowledge of vulnerability assessment and conducting penetration tests
• Knowledge of security frameworks such as ISO 27001, NIST or COBIT
• Strong analytical and problem-solving skills to mitigate risks and propose effective solutions
• Ability to work independently and lead small projects within the security area
• Communication skills to interact with technical teams and managers at different levels
• Results-oriented with a focus on continuous improvement of security processes
• Commitment to confidentiality and ethics in handling sensitive data
• Proactive with a sense of urgency in responding to security incidents

Preferred Qualifications

• Postgraduate degree in Information Security, IT Management or related areas
• Security certifications (CISSP, CISM, CompTIA Security+)
• Experience with personal data protection (LGPD/GDPR)
• Familiarity with digital forensics and advanced incident response
• Experience with DLP (Data Loss Prevention) solutions
• Previous experience in information security projects and crisis management
• Knowledge of IT infrastructure
• Ability to work with various IT areas and security solution vendors
• Ability to adapt to technological changes and new security challenges
• Experience working in multidisciplinary teams and collaborative projects