Information Security Manager

Jobtailor; Barueri; Presencial; BRL 180 000 - 300 000; Tempo integral

Resumo da oferta

Jobtailor is seeking an experienced information security consultant to lead and support governance, risk and compliance initiatives for client engagements in Brazil. You will work with technical teams, commercial areas, clients and executive leadership to advance cyber risk programs, maturity assessments and control definitions.

Responsibilities include directing assessments, audits and improvement plans, ensuring alignment with industry frameworks and regulatory requirements while coordinating

Qualificações

• Experience leading information security, governance, risk and compliance projects.
• Experience conducting maturity diagnostics and control evaluations.
• Ability to align security programs with client objectives and regulatory requirements.
• Strong stakeholder coordination across multidisciplinary teams and vendors.

Responsabilidades

• Lead and support information security, governance, risk and compliance projects with quality and timely delivery.
• Structure and evolve security and governance programs, policies, metrics and executive monitoring.
• Conduct assessments, audits and improvement recommendations based on frameworks and best practices.
• Support cyber risk management, third-party management, regulatory compliance, data protection and process improvement.
• Coordinate multidisciplinary teams, vendors and stakeholders.

Conhecimentos

InfoSec

Governance

Risk Mgmt

Compliance

Audit

Third-Party Mgmt

Cyber Maturity

Descrição da oferta de emprego

• Lead and support the delivery of consultative services in Information Security, Governance, Risk Management, Compliance, Audit, Third-Party Management and cybersecurity maturity programs, working collaboratively with technical teams, commercial areas, clients and executive leadership.
• Ensure the structuring, coordination and advancement of projects related to cyber risk management, governance programs, compliance processes, maturity assessments, internal audits, definition of controls, executive metrics and continuous improvement plans, taking into account industry best practices, regulatory requirements and recognized information security frameworks.
• Provide operational leadership for initiatives, support scope definition, provide technical backing for proposals, conduct assessments, prepare recommendations and liaise with clients, ensuring alignment between security, risk, compliance, operational efficiency and business objectives.

Requirements

• Lead and support Information Security, Governance, Risk and Compliance projects, ensuring technical quality, methodological adherence, timely delivery and alignment with client needs.
• Structure, review and evolve security and governance programs, including policies, processes, controls, metrics, risk matrices, action plans and executive monitoring models.
• Conduct assessments, internal audits, maturity diagnostics, control evaluations and improvement recommendations based on frameworks and industry best practices.
• Support initiatives on cyber risk management, third-party management, regulatory compliance, data protection, vulnerability management, incident management and security process improvement.
• Coordinate multidisciplinary teams, vendors and stakeholders.