Sr. Security Analyst - GRC (São José dos Campos/SP)

Ball Corporation; São José dos Campos; Hybrid; BRL 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid on-site work

Job summary

Ball Corporation is seeking a Senior Analyst within Cybersecurity Governance, Risk, and Compliance (GRC) to strengthen Ball's global program. You will collaborate with cross-functional stakeholders to manage cybersecurity risks, support compliance, and enable informed business decisions.

This role leads key GRC workstreams, develops metrics and dashboards, and partners with IT, legal, procurement, finance, and audit to drive consistent GRC processes globally.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Risk Management, Business Administration, or related field.
• Experience in cybersecurity, technology risk, compliance, audit, or related disciplines.
• Working knowledge of cybersecurity frameworks such as NIST CSF, ISO/IEC 27001, CIS Controls, and related regulatory requirements.
• Strong analytical, documentation, and risk assessment skills.
• Ability to communicate effectively with both technical and non-technical stakeholders and collaborate across global teams.
• Professional certifications in cybersecurity, risk, or compliance are preferred, along with proficiency in English.

Responsibilities

• Lead cybersecurity governance activities, including policy and standards reviews, control mapping, and maintenance of governance frameworks.
• Support enterprise cybersecurity risk management through risk identification, assessment, prioritization, treatment tracking, and reporting.
• Coordinate cybersecurity compliance, audit, and assurance activities, including evidence collection, findings management, and remediation validation.
• Conduct higher-risk third-party and supplier security assessments, providing recommendations for risk mitigation and decision-making.
• Develop and maintain cybersecurity metrics, dashboards, executive reporting, and governance documentation to support organizational oversight.
• Partner with cybersecurity, IT, legal, procurement, finance, and audit stakeholders to drive consistent and effective GRC processes globally.

Skills

Analytical skills

Documentation

Risk assessment

Communication

Cross-functional collaboration

Education

Bachelor's degree in Information Security / Computer Science / Risk Management / Business Administration

Tools

NIST CSF

ISO/IEC 27001

CIS Controls

Job description

At Ball, integrity and trust are the foundation of who we are. Guided by our core values—"We Care. We Work. We Win."—we create a culture where every voice matters and every idea drives progress.
Further your career at Ball, a world leader in manufacturing sustainable aluminium packaging. Achieve extraordinary things when you join our team, and make a difference in your professional development, the community, and around the globe!
* This position will be posted internally for a minimum of 5 days and will remain open until filled or adjusted based on the volume of applicants.

Your Opportunity to Make an Impact

At Ball, every role contributes to something bigger. Learn how this opportunity will allow you to grow your career while making a lasting impact on our business, our communities, and our planet:

As a Senior Analyst within Cybersecurity Governance, Risk, and Compliance (GRC), you will play a critical role in strengthening Ball Corporation’s global cybersecurity program. Working closely with cross-functional stakeholders, you will help ensure cybersecurity risks are effectively managed, compliance obligations are supported, and governance processes enable informed business decisions. This role offers the opportunity to lead key GRC workstreams while influencing the security posture of a global organization.

How You'll Make a Difference

The responsibilities below represent more than daily tasks. They are opportunities to make a difference, collaborate with talented colleagues, and contribute to meaningful outcomes:

• Lead cybersecurity governance activities, including policy and standards reviews, control mapping, and maintenance of governance frameworks.
• Support enterprise cybersecurity risk management through risk identification, assessment, prioritization, treatment tracking, and reporting.
• Coordinate cybersecurity compliance, audit, and assurance activities, including evidence collection, findings management, and remediation validation.
• Conduct higher-risk third-party and supplier security assessments, providing recommendations for risk mitigation and decision‑making.
• Develop and maintain cybersecurity metrics, dashboards, executive reporting, and governance documentation to support organizational oversight.
• Partner with cybersecurity, IT, legal, procurement, finance, and audit stakeholders to drive consistent and effective GRC processes globally.

What Helps You Thrive in This Role

We're looking for curious minds, collaborative spirits, and motivated professionals ready to make an impact. Here are the skills and experiences that will help you succeed in this role:

• Bachelor's degree in Information Security, Computer Science, Risk Management, Business Administration, or a related field.
• Experience in cybersecurity, technology risk, compliance, audit, or related disciplines.
• Working knowledge of cybersecurity frameworks such as NIST CSF, ISO/IEC 27001, CIS Controls, and related regulatory requirements.
• Strong analytical, documentation, and risk assessment skills with attention to detail and evidence quality.
• Ability to communicate effectively with both technical and non‑technical stakeholders and collaborate across global teams.
• Professional certifications in cybersecurity, risk, or compliance are preferred, along with proficiency in English.

Additional Information

• Hybrid On‑Site Work Environment: This position requires regular in‑person engagement by working on‑site for three (3) days per work week (with core collaboration days of Tuesday, Wednesday and Thursday).
• Schedule: 8:00 AM to 5:00 PM or 9:00 AM to 6:00 PM

Ball Corporation is an Equal Opportunity Employer. We actively encourage applications from everybody, regardless of gender, age, ethnicity, faith, ability, or orientation. Our products range from infinitely recyclable aluminium cans, cups to aerosol bottles solutions that enable our customers to contribute to a better world.
Each of us has a deep commitment to diversity and inclusion which is the foundation of our culture of belonging. Everyone at Ball is making a difference by doing what we love. Because what we create may change, but what we will always make is a difference.
Please note the advertised job title might vary from the job title on the contract due to local job title structure and global HR systems.