Junior Information Security Analyst

Jobtailor; Rio de Janeiro; Presencial; BRL 100 000 - 140 000; Tempo integral

Resumo da oferta

Jobtailor in Rio de Janeiro seeks an Information Security Governance professional to drive ISMS evolution and ensure regulatory compliance. You will support vendor assessments, deliver security training, and manage security policies across the organization.

The role requires a degree in a related field, experience in governance, and familiarity with CIS Controls v8, ISO 27001, and NIST. Certifications such as CISM or CISSP are a plus, with exposure to the financial or insurance sector valued.

Qualificações

• Degree in Information Security, Computer Science, or a related technology field.
• Experience in Information Security Governance.
• Knowledge of CIS Controls v8, ISO 27001, and NIST.
• Experience delivering information security culture training.

Responsabilidades

• Work in Information Security Governance.
• Ensure regulatory compliance and drive the evolution of the ISMS.
• Support vendor assessments and supply chain security evaluations.
• Deliver training and information security awareness activities.
• Manage policies, standards, and procedures.
• Execute the Information Security Training and Awareness Program.
• Apply CIS Controls v8, ISO 27001, and NIST frameworks.
• Support corporate projects by providing security guidelines.
• Assist with maturity and risk assessments.

Conhecimentos

Information Security Governance

Regulatory Compliance

Vendor Assessment

Risk Assessment

Security Policy Management

Formação académica

Bachelor's degree in Information Security or related field

Descrição da oferta de emprego

• Work in Information Security Governance.
• Ensure regulatory compliance and drive the evolution of the Information Security Management System (ISMS).
• Support vendor assessments and supply chain security evaluations.
• Deliver training and information security awareness activities.
• Manage policies, standards, and procedures.
• Execute the Information Security Training and Awareness Program.
• Apply frameworks such as CIS Controls v8, ISO 27001, and NIST.
• Support corporate projects by providing security guidelines.
• Assist with maturity and risk assessments.

Requirements

• Degree in Information Security, Computer Science, or a related technology field.
• Experience in Information Security Governance.
• Knowledge of frameworks such as CIS Controls v8, ISO 27001, and NIST.
• Experience delivering information security culture training.
• ISO 27001, CISM, CISSP or DPO certifications are a plus.
• Experience in the financial or insurance sector is a plus.
• Strong communication skills.
• Well organized.

Core Competencies

Demonstrates expertise in Information Security Governance, regulatory compliance, and the implementation of Information Security Management Systems (ISMS). Proficient in applying frameworks such as CIS Controls v8, ISO 27001, and NIST while delivering training and managing security policies.

Highest-signal resume keywords

• Information Security Governance
• CIS Controls v8
• ISO 27001
• NIST
• CISM

ATS Optimization Keywords

Hard Skills

• Information Security Management System
• Regulatory Compliance
• Vendor Assessment
• Risk Assessment
• Security Policy Management

Soft Skills

• Strong Communication Skills
• Well Organized

Certifications & Qualifications

• CISM
• CISSP
• DPO

Industry Keywords

• Financial Sector
• Insurance Sector