Security Governance Coordinator – Affirmative Action Position for Women

Jobtailor; São Paulo; Presencial; BRL 180 000 - 300 000; Tempo integral

Resumo da oferta

Jobtailor is seeking a senior information security leader in São Paulo to coordinate governance and promote a culture of security. The role focuses on regulatory alignment, resilience of critical environments, and audit readiness across ISO standards.

You will drive third-party risk management, engage stakeholders, and oversee security analytics and budgeting. The ideal candidate has advanced English, a Bachelor’s degree, and hands-on experience with ISO management systems.

Qualificações

• Bachelor’s degree completed.
• Information Security Risk Management experience.
• Knowledge of ISO 27001 and ISO 22301.
• Experience with ISO management systems.
• Third-party risk management.
• Advanced English proficiency.
• Experience responding to due diligence requests and supplier meetings.
• ISO certification held in the individual’s name or proven relevant experience (preferred).

Responsabilidades

• Coordinate effective information security governance and promote an integrated view of corporate risks.
• Promote Security Culture Program and employee training to reduce risks.
• Support reporting to engage employees, executives, and stakeholders through dashboards.
• Manage security and business continuity risks integrated with operations.
• Establish controls with security pillars for each business unit and document exceptions.
• Ensure regulatory compliance, audits, and readiness including ISO audits and industry frameworks.
• Oversee Security Culture Program audience targeting and testing to increase maturity.
• Assist other information security pillars, policy updates, and budget management.

Conhecimentos

Information Security Risk Management

ISO 27001 Knowledge

ISO 22301 Knowledge

Third-Party Risk Management

Advanced English Proficiency

Due Diligence Responses

ISO Certification (preferred)

Formação académica

Bachelor’s degree completed

Ferramentas

Dashboards

Control Catalog

Descrição da oferta de emprego

Coordinate effective information security governance, promoting an integrated and holistic view of corporate risks while ensuring alignment with regulatory requirements and the resilience of critical environments.
Promote employee and third-party training through the Security Culture Program.
Support employee engagement and retention, as well as executive relations, through reports and dashboards.
Manage security and business continuity risks integrated with business operations.
Establish, together with the security pillars, appropriate controls for each business unit’s operating model and document potential exceptions.
Ensure regulatory compliance, adherence to best practices, and audit readiness, including engagement with regulators, external audits, ISO 27001 and ISO 22301 certification audits, industry frameworks, and supplier and customer due diligence.
Manage the Security Culture Program by defining critical audiences, targeted tests, and a schedule to increase maturity and reduce social engineering and data leakage risks.
Support other Information Security pillars, risk management, policy updates, the operating model, the control catalog, and budget management.

Requirements

• Bachelor’s degree completed.
• Information security risk management.
• Knowledge of ISO 27001 and ISO 22301.
• Experience with ISO management systems.
• Third-party risk management.
• Advanced English proficiency.
• Experience responding to due diligence requests, attending supplier meetings, and participating in events.
• ISO certification held in the individual’s name or proven relevant experience (preferred).

Core Competencies

Demonstrates expertise in Information Security Risk Management, ensuring compliance with ISO 27001 and ISO 22301 standards while promoting a robust Security Culture Program. Capable of managing third-party risks and engaging with stakeholders to enhance organizational resilience and audit readiness.

Highest-signal resume keywords

• Information Security Risk Management
• ISO 27001 Knowledge
• ISO 22301 Knowledge
• Third-Party Risk Management
• Advanced English Proficiency

Hard Skills

• Information Security Governance
• Regulatory Compliance
• Audit Readiness
• Risk Management
• Business Continuity Management

Soft Skills

• Employee Engagement
• Communication
• Collaboration

Certifications & Qualifications

• ISO Certification

Industry Keywords

• Due Diligence
• Supplier Management
• External Audits
• Industry Frameworks

Tools & Technologies

• Security Culture Program
• Control Catalog
• Dashboards