IT Security Specialist

International Council on Clean Transportation, Inc.; São Paulo; On-site; BRL 120,000 - 180,000; Full time

Job summary

The International Council on Clean Transportation, Inc. is seeking an IT Security Specialist to lead security platforms, monitor risks, respond to incidents, and support regulatory compliance across global offices.

You will administer EDR, SIEM, IAM, and VPNs, coordinating with IT leadership and staff worldwide to maintain a strong security posture and protect data and staff across the organization.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or a related field (or equivalent experience).
• 3–5 years of hands-on experience in IT security, information assurance, or a related role.
• Demonstrated experience administering endpoint management and security tools (MDM and EDR platforms).
• Hands-on experience with SIEM platforms, EDR tools, and identity management systems.

Responsibilities

• Administer and maintain ICCT’s security platforms, including EDR, web filtering, and IAM systems.
• Manage endpoint security across ICCT’s device fleet with MDM and endpoint protection platforms.
• Monitor security dashboards, alerts, and threat intel; triage and respond to incidents promptly.
• Oversee email security solutions and coordinate security awareness training, including phishing simulations.
• Manage identity and access controls across IAM and directory platforms; ensure secure authentication and SSO.
• Conduct risk assessments, vulnerability scans, and security audits; coordinate penetration testing as needed.
• Maintain and update ICCT’s IT security policies, standards, and incident response procedures.
• Support compliance with LGPD and GDPR; serve as a point of contact for privacy and security inquiries.
• Manage VPNs, firewalls, and network security appliances; oversee credential lifecycle and secure storage.
• Monitor SaaS security and data backup validation across cloud platforms.
• Perform vendor security reviews to ensure third-party systems meet ICCT’s security requirements.
• Support onboarding/offboarding with secure device provisioning and account decommissioning.
• Communicate security risks and recommendations clearly to technical and non-technical audiences.

Skills

MDM

EDR

SIEM

IAM

Vulnerability Scans

Incident Response

Security Frameworks

LGPD/GDPR

English Proficiency

Time Zone Coordination

Education

BSc Information Security

Tools

MDM Platforms

Endpoint Protection

Cloud Security Tools

Job description

The International Council on Clean Transportation (ICCT) is seeking an IT Security Specialist to join our global IT team. As ICCT builds internal IT capacity, this role will take ownership of the organization’s security platforms and day-to-day security operations, ensuring our systems, data, and staff are protected against evolving threats across all global offices.

The IT Security Specialist will administer and optimize ICCT’s security toolstack, monitor risks, respond to incidents, and support compliance with applicable data protection regulations. The role will work closely with the IT Director and collaborate with staff across ICCT’s offices worldwide.

You Will

• Administer and maintain ICCT’s security platforms, including endpoint detection and response (EDR) tools, web filtering and network threat prevention, SIEM, and identity and access management (IAM) systems.
• Manage endpoint security across ICCT’s device fleet using mobile device management (MDM) and endpoint protection platforms, ensuring devices are enrolled, compliant, and receiving current security policies.
• Monitor security dashboards, alerts, and threat intelligence feeds; triage and respond to security incidents promptly.
• Oversee email security solutions and coordinate security awareness training programs, including phishing simulations and staff education campaigns.
• Manage identity and access controls across IAM and directory platforms, ensuring secure authentication, single sign-on, and appropriate access provisioning.
• Conduct regular risk assessments, vulnerability scans, and security audits; coordinate penetration testing as needed.
• Maintain and update ICCT’s IT security policies, standards, and incident response procedures.
• Support compliance with applicable data protection regulations, including Brazil’s LGPD and the EU’s GDPR; serve as a point of contact for privacy and security-related inquiries.
• Manage VPN infrastructure and support firewalls and network security appliances across ICCT offices.
• Manage privileged access and password management systems; oversee credential lifecycle and secure storage practices.
• Monitor SaaS application security and oversee data backup validation across cloud platforms.
• Perform vendor security reviews and ensure that third-party systems meet ICCT’s security and privacy requirements.
• Support onboarding and offboarding processes, including secure device provisioning and account decommissioning.
• Communicate security risks and recommendations clearly to both technical and non-technical audiences, including senior leadership.

You Have: Required

• Bachelor’s degree in Information Security, Computer Science, or a related field (or equivalent experience).
• 3-5 years of hands-on experience in IT security, information assurance, or a related role.
• Demonstrated experience administering endpoint management and security tools (MDM and EDR platforms).
• Hands-on experience with SIEM platforms, EDR tools, and identity management systems.
• Solid understanding of security frameworks, threat prevention, and incident response processes.
• Familiarity with data protection regulations, particularly LGPD (Brazil), GDPR (EU), or equivalent.
• Strong analytical and problem-solving skills with the ability to manage multiple priorities across time zones.
• Excellent written and verbal communication skills in English; ability to explain technical concepts to non-technical audiences.
• Ability to work independently and collaborate effectively across global, distributed teams.

Preferred

• Professional certifications such as CompTIA Security+, CISSP, CISM, or equivalent.
• Experience with enterprise productivity suite security features, including conditional access, data loss prevention, and threat protection.
• Familiarity with cloud security concepts and major cloud platforms.
• Experience in international nonprofit or research organizations.
• Portuguese language skills (strong plus for Brazil-based candidates).
• Experience with Zero Trust architecture and identity-based access controls.

Position Details

The ICCT is an independent, global, non-profit research organization that supports effective policy-making on climate change and public health by providing timely, accurate, data-driven research and advice to regulators, NGOs, and other stakeholders. The ICCT has offices in Washington DC, San Francisco, Berlin, Beijing, São Paulo, and New Delhi. The ICCT offers a mission-driven, egalitarian, culturally diverse workplace where intelligence, flexibility, transparency, and good humor are highly valued. We offer a competitive salary plus an excellent benefits package.

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status.

We are proud to be an equal opportunity workplace.