Senior Cyber Risk Specialist (Hybrid Or Remote)

iTRTech Group; Brotas; Híbrido; BRL 240.000 - 360.000; Jornada completa

Descripción de la vacante

A iTRTech Group busca um(a) Senior Cyber Risk Specialist para atuar em modelo híbrido ou remoto no Brasil. O profissional apoiará o desenvolvimento de frameworks de Cyber Risk, identificará riscos, avaliará controles e traduz vulnerabilidades técnicas em impactos de negócio.

Exige-se experiência ≥ 6 anos, inglês avançado, e habilidade em reportar para stakeholders. O papel envolve colaboração com equipes de Tecnologia, Privacidade e Risco Operacional, além de conduzir entrevistas e workshops com

Formación

• Experiência sólida em Cyber Risk, Information Security Risk e Technology Risk.
• Conhecimento de metodologias de gestão de risco e avaliações de segurança.
• Capacidade de traduzir vulnerabilidades técnicas em impactos de negócio.

Responsabilidades

• Desenvolver e aprimorar frameworks e metodologias de Cyber Risk.
• Identificar, analisar e avaliar cenários de risco cibernético.
• Avaliar desenho, efetividade e maturidade de controles de segurança.
• Auxiliar processos de Risk Acceptance, Exception Management e Risk Treatment.
• Desenvolver e monitorar KRIs, KPIs, Registros de Risco e dashboards.
• Conduzir avaliações de risco envolvendo fornecedores e terceiros.

Conocimientos

Cyber Risk

Information Security Risk

Risk Management

Security Controls Evaluation

Stakeholder Management

English (Advanced)

Educación

CRISC,CISSP,CISM,CISA,ISO 27001 certifications

Descripción del empleo

SENIORCYBER RISK SPECIALIST (HYBRID OR REMOTE BRAZIL)

Company hires for hybrid or remote position

?? Location: Brazil —candidates from any region are welcome

?? Only candidates already basedin Brazil will be considered

?? Work Model: Hybridfor candidates living in state capitals and Remote forcandidates living in countryside/cities outside the state capitals

??? Language Requirements:Advanced or Fluent English

?? Seniority: Senior (6+years)

About the Opportunity

We are looking for an experienced Senior Cyber Risk Specialist to support the development and continuous improvement of Cyber Risk Management frameworks and methodologies in a complex enterprise environment.

The professional will be responsible for identifying, assessing, and monitoring cybersecurity risks, evaluating security controls, and translating technical vulnerabilities into business impacts and actionable recommendations.

Responsibilities

• Support the development and improvement of Cyber Risk Management frameworks and methodologies.
• Identify, analyze, and assess cybersecurity risk scenarios, including inherent and residual risks.
• Evaluate the design, effectiveness, and maturity of security controls.
• Support Risk Acceptance, Exception Management, and Risk Treatment processes.
• Develop and monitor Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), Risk Registers, and dashboards.
• Conduct cyber risk assessments involving vendors and third-party providers.
• Collaborate with Technology, Privacy, Resilience, and Operational Risk teams.
• Facilitate stakeholder interviews and workshops, preparing risk reports and executive presentations.

Requirements

• Strong professional experience in Cyber Risk, Information Security Risk, Technology Risk, or related areas.
• Solid knowledge of Risk Management methodologies and cybersecurity risk assessment practices.
• Experience identifying and evaluating cybersecurity risk scenarios.
• Hands-on experience conducting inherent and residual risk assessments.
• Knowledge of security control design, effectiveness, and maturity assessments.
• Ability to translate technical vulnerabilities and security risks into business impacts and recommendations.
• Strong analytical, communication, and stakeholder management skills.
• Advanced or fluent English for communication in international environments.

Nice to Have

• Experience with Third-Party Risk Management or Vendor Cyber Risk assessments.
• Knowledge of Risk Acceptance, Exception Management, and Risk Treatment Plans.
• Experience with KRIs, KPIs, Risk Registers, and risk dashboards.
• Understanding of Technology Risk, Privacy Risk, Resilience, and Operational Risk.
• Certifications such as CRISC, CISSP, CISM, CISA, or ISO 27001-related certifications.

Ideal Candidate Profile

A Senior Cyber Risk Specialist with strong expertise in cybersecurity risk assessment, security control evaluation, and enterprise risk management. The ideal candidate demonstrates analytical thinking, business-oriented risk communication, and the ability to collaborate with technical teams, business stakeholders, and executive leadership in an international environment.

5 Questions for Candidates

• How many years of professional experience do you have in Cyber Risk, Information Security Risk, or Technology Risk?
• What is your experience conducting inherent and residual risk assessments and evaluating security controls?
• Have you worked with Cyber Risk Management frameworks, Risk Acceptance, Exception Management, or Risk Treatment Plans?
• What is your experience with Third-Party Cyber Risk, KRIs, KPIs, Risk Registers, and executive risk reporting?
• What are your current salary, salary expectations, and availability to work in a hybrid or remote model in Brazil?

Keywords

Cyber Risk, Cyber Risk Management, Information Security Risk, Technology Risk, Cybersecurity, Risk Assessment, Inherent Risk, Residual Risk, Security Controls, Risk Management Framework, Third-Party Risk, Vendor Risk Management, Risk Acceptance, Exception Management, Risk Treatment, KRIs, KPIs, Risk Registers, Risk Dashboards, Operational Risk, Privacy Risk, Resilience, CRISC, CISSP, CISM, CISA, ISO 27001

#EY BR

Formação Acadêmica:

Não informado

Salário:

0

Cargo:

Outros

Empresa:

iTRTech Group

Atua com construção civil, construções de galpão industriais e comerciais, casas de alto padrão, construções de praças, dentre outras atuações.

Ramo:

Construção Civil / Engenharia Civil

(DG)