IT Security Specialist

The International Council on Clean Transportation; São Paulo; On-site; BRL 120,000 - 180,000; Full time

Job summary

The International Council on Clean Transportation (ICCT) is seeking an IT Security Specialist to join our global IT team and own security platforms, protecting systems, data, and staff across ICCT offices worldwide.

Responsibilities include administering EDR, MDM, SIEM and IAM, monitoring threats, conducting risk assessments, coordinating privacy/compliance with LGPD and GDPR, and supporting secure onboarding for staff across time zones. Excellent English communication required.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 3–5 years of hands-on IT security experience.
• Experience administering endpoint management and security tools.
• Hands-on with SIEM, EDR, and identity management systems.
• Knowledge of LGPD and GDPR and data protection concepts.
• Strong analytical, multi-time-zone coordination, and English communication.
• Ability to work independently within global teams.

Responsibilities

• Administer and optimize ICCT’s security toolstack, including EDR and IAM.
• Monitor security dashboards, alerts, and threat intelligence feeds; respond to incidents.
• Manage endpoint security across device fleet with MDM and policies.
• Coordinate privacy and security compliance with LGPD and GDPR.
• Support onboarding/offboarding and staff security awareness programs.
• Communicate risks clearly to technical and non-technical audiences.

Skills

IT security

Endpoint security

SIEM

IAM

Threat intelligence

Risk assessments

Cross‑time zone coordination

Education

Bachelor’s degree in Information Security or related field

Tools

MDM

EDR

SIEM

IAM

VPN

Firewalls

Job description

The International Council on Clean Transportation (ICCT) is seeking an IT Security Specialist to join our global IT team. As ICCT builds internal IT capacity, this role will take ownership of the organization’s security platforms and day-to-day security operations, ensuring our systems, data, and staff are protected against evolving threats across all global offices.

The IT Security Specialist will administer and optimize ICCT’s security toolstack, monitor risks, respond to incidents, and support compliance with applicable data protection regulations. The role will work closely with the IT Director and collaborate with staff across ICCT’s offices worldwide.

You Will

• Administer and maintain ICCT’s security platforms, including endpoint detection and response (EDR) tools, web filtering and network threat prevention, SIEM, and identity and access management (IAM) systems.
• Manage endpoint security across ICCT’s device fleet using mobile device management (MDM) and endpoint protection platforms, ensuring devices are enrolled, compliant, and receiving current security policies.
• Monitor security dashboards, alerts, and threat intelligence feeds; triage and respond to security incidents promptly.
• Oversee email security solutions and coordinate security awareness training programs, including phishing simulations and staff education campaigns.
• Manage identity and access controls across IAM and directory platforms, ensuring secure authentication, single sign-on, and appropriate access provisioning.
• Conduct regular risk assessments, vulnerability scans, and security audits; coordinate penetration testing as needed.
• Maintain and update ICCT’s IT security policies, standards, and incident response procedures.
• Support compliance with applicable data protection regulations, including Brazil’s LGPD and the EU’s GDPR; serve as a point of contact for privacy and security-related inquiries.
• Manage VPN infrastructure and support firewalls and network security appliances across ICCT offices.
• Manage privileged access and password management systems; oversee credential lifecycle and secure storage practices.
• Monitor SaaS application security and oversee data backup validation across cloud platforms.
• Perform vendor security reviews and ensure that third-party systems meet ICCT’s security and privacy requirements.
• Support onboarding and offboarding processes, including secure device provisioning and account decommissioning.
• Communicate security risks and recommendations clearly to both technical and non-technical audiences, including senior leadership.

You Have: Required

• Bachelor’s degree in Information Security, Computer Science, or a related field (or equivalent experience).
• 3–5 years of hands‑on experience in IT security, information assurance, or a related role.
• Demonstrated experience administering endpoint management and security tools (MDM and EDR platforms).
• Hands‑on experience with SIEM platforms, EDR tools, and identity management systems.
• Solid understanding of security frameworks, threat prevention, and incident response processes.
• Familiarity with data protection regulations, particularly LGPD (Brazil), GDPR (EU), or equivalent.
• Strong analytical and problem‑solving skills with the ability to manage multiple priorities across time zones.
• Excellent written and verbal communication skills in English; ability to explain technical concepts to non‑technical audiences.
• Ability to work independently and collaborate effectively across global, distributed teams.

Preferred

• Professional certifications such as CompTIA Security+, CISSP, CISM, or equivalent.
• Experience with enterprise productivity suite security features, including conditional access, data loss prevention, and threat protection.
• Familiarity with cloud security concepts and major cloud platforms.
• Experience in international nonprofit or research organizations.
• Portuguese language skills (strong plus for Brazil‑based candidates).
• Experience with Zero Trust architecture and identity‑based access controls.

Position Details

The ICCT is an independent, global, non‑profit research organization that supports effective policy‑making on climate change and public health by providing timely, accurate, data‑driven research and advice to regulators, NGOs, and other stakeholders. The ICCT has offices in Washington DC, San Francisco, Berlin, Beijing, São Paulo, and New Delhi. TheICCT offers a mission‑driven, egalitarian, culturally diverse workplace where intelligence, flexibility, transparency, and good humor are highly valued. We offer a competitive salary plus an excellent benefits package.

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace.