IT Governance Analyst – Mid-Level

Jobtailor; Curitiba; Presencial; BRL 120 000 - 190 000; Tempo integral

Resumo da oferta

Jobtailor in Curitiba, Brazil is seeking a data protection and IT governance professional to map, document, and improve IT processes with focus on efficiency, internal controls, and compliance.

You will support the DPO, monitor regulations from ANPD, assist audits and certification, and help align IT with regulatory requirements while handling risk assessments for generative AI tools.

Qualificações

• Bachelor's degree in IT, Law, Business Administration, Information Security, or related fields.
• Experience in IT Governance, Compliance, Audit, Information Security, or Data Privacy.
• Preferably experience in financial institutions or regulated environments.
• Experience with data governance initiatives or risk assessments of generative AI tools in a corporate environment.
• Familiarity with COBIT, ITIL, ISO/IEC 27001, ISO/IEC 27002, CIS Controls, or NIST CSF.
• Strong knowledge of the LGPD and ANPD regulations.
• Solid understanding of risk management and internal controls.
• Advanced Excel and Power BI proficiency.
• Experience with ITSM tools such as Jira, ServiceNow, GLPI, or similar.
• Analytical skills, attention to detail, excellent communication, and strong organizational ability to manage multiple concurrent tasks.

Responsabilidades

• Map, document, and improve IT processes with focus on efficiency, internal controls, and compliance.
• Support the DPO's activities, including responding to data subjects, ROPA/DPIAs, and management of data incidents.
• Monitor regulatory developments from ANPD and organize evidence for audits.
• Assist ISO/IEC 27001 and PCI-DSS certification processes and monitor action plans.
• Assess contracts and conduct vendor due diligence from cybersecurity and LGPD perspectives.

Conhecimentos

IT Governance

Data Privacy

Risk Management

ISO/IEC 27001

LGPD Compliance

Data Protection Impact Assessments

Records of Processing Activities

Vendor Due Diligence

Audit Support

Process Improvement

Artificial Intelligence Ethics

Formação académica

Bachelor's degree in IT, Law, Business Administration, Information Security, or related fields

Ferramentas

Excel

Power BI

Jira

ServiceNow

GLPI

Descrição da oferta de emprego

Map, document, and improve IT processes with a focus on efficiency, internal controls, and compliance
Support the DPO's activities, including responding to data subjects, Records of Processing Activities (ROPA)/Data Protection Impact Assessments (DPIAs), and management of data incidents
Monitor regulatory developments from the ANPD (Brazilian Data Protection Authority)
Organize evidence and support internal and external audits
Support ISO/IEC 27001 and PCI-DSS certification processes
Monitor action plans resulting from audits and certifications
Assess contracts and conduct vendor due diligence from cybersecurity, LGPD (Brazilian Data Protection Law), and financial-sector compliance perspectives
Maintain IT risk matrices
Support IT processes and internal controls
Prepare responses to regulatory bodies, including BACEN (Central Bank of Brazil) and ANPD
Operationalize policies and internal controls to ensure the ethical and secure use of Artificial Intelligence
Contribute to alignment between IT, the business, and regulatory requirements

Requirements

• Bachelor's degree in IT, Law, Business Administration, Information Security, or related fields
• Previous experience in IT Governance, Compliance, Audit, Information Security, or Data Privacy
• Preferably experienced in financial institutions or regulated environments
• Experience with data governance initiatives or risk assessments of generative AI tools in a corporate environment
• Familiarity with COBIT, ITIL, ISO/IEC 27001, ISO/IEC 27002, CIS Controls, or NIST CSF
• Strong knowledge of the LGPD and ANPD regulations
• Solid understanding of risk management and internal controls
• Advanced Excel and Power BI proficiency
• Experience with ITSM tools such as Jira, ServiceNow, GLPI, or similar
• Analytical skills, attention to detail, excellent communication, and strong organizational ability to manage multiple concurrent tasks

Core Competencies

Demonstrates expertise in IT Governance, Compliance, and Data Privacy, with a strong focus on regulatory requirements such as LGPD and ANPD. Proficient in risk management, internal controls, and supporting certification processes like ISO/IEC 27001 and PCI-DSS.

Highest-signal resume keywords

• IT Governance
• Data Privacy
• Risk Management
• ISO/IEC 27001
• LGPD Compliance

ATS Optimization Keywords

Hard Skills

• Data Governance
• Risk Assessment
• Internal Controls
• Regulatory Compliance
• Data Protection Impact Assessments
• Records of Processing Activities
• Vendor Due Diligence
• Audit Support
• Process Improvement
• Artificial Intelligence Ethics

Soft Skills

• Analytical Skills
• Attention to Detail
• Excellent Communication
• Organizational Ability
• Task Management

Industry Keywords

• ANPD
• BACEN
• ISO/IEC 27002
• CIS Controls
• NIST CSF
• Financial Sector Compliance
• Regulated Environments

Tools & Technologies

• Excel
• Power BI
• Jira
• ServiceNow
• GLPI