Role overview
Assess the security of proposed and changing technology solutions across a service provider environment. You’ll give independent, risk-based guidance to business, architecture, engineering, and technology teams, helping them identify security gaps and make informed decisions while the delivery teams retain responsibility for solution design and implementation.
Responsibilities
- Review solution designs and assess risks, threats, vulnerabilities, data flows, and security control gaps.
- Conduct security architecture reviews, risk assessments, and threat modeling for new and changing solutions.
- Evaluate controls across identity and access management, data protection, encryption, authentication, networks, infrastructure, applications, middleware, and service management.
- Recommend remediation or mitigating controls, challenge design assumptions, and explain risks to technical teams, business stakeholders, and senior leaders.
- Assess vendor and third-party solutions against security requirements, identifying issues for remediation, mitigation, or formal risk acceptance.
- Help teams consider security policies, standards, regulatory requirements, and architecture principles throughout the technology lifecycle.
Requirements
- At least 10 years of security architecture design and implementation experience in a service provider organization.
- Experience with security frameworks such as NIST CSF, ISO 27001, or CIS Controls.
- Strong knowledge of security technologies, including firewalls, intrusion detection and prevention, vulnerability scanning, and endpoint protection.
- Strong understanding of cloud security concepts and services across AWS, Azure, and Google Cloud.
- Advanced or fluent English.
Nice to have
- CISSP, CISM, or CCSP certification.
- Bachelor’s or master’s degree in computer science, information security, or a related field.
Benefits and work setup
- Remote position based in Brazil, with working hours of 9:00 a.m. to 6:00 p.m., Monday through Friday.
- Professional development opportunities, including learning, coaching, and certification support.
- Well-being programs and a flexible, inclusive work environment.