GRC Analyst

Overview Join to apply for the Senior GRC Analyst role at TRACTIAN. TRACTIAN is transforming the industrial world by empowering frontline maintenance workers to achieve more. We’ve fused cutting-edge hardware with innovative software into one powerful platform, disrupting legacy systems and delivering smarter, faster solutions for our clients. At TRACTIAN, you'll break boundaries, question convention, and collaborate with top talent to drive real change. As a growth-stage startup, you’ll work alongside the founders, shaping the vision, products, and experiences that will define the future of industrial tech. GRC at TRACTIAN The Engineering team at TRACTIAN is at the forefront of developing cutting-edge infrastructure, technologies, and products to harness the power of IoT data. Our team of talented engineers collaborates to build robust systems, innovative solutions, and scalable platforms that drive TRACTIAN's success. We are instrumental in shaping the company's decision-making process, optimizing operational efficiency, and delivering exceptional experiences to our consumers. Responsibilities Perform Business Impact Analysis (BIA), mapping processes and identifying RTO and RPO. Conduct the identification, mapping, assessment, and management of both operational and strategic risks across the organization, ensuring compliance with all applicable regulations and internal policies. Keep all the BCP and Disaster Recovery documents up to date. Develop, implement, and update company-wide compliance processes, procedures and rules to ensure alignment with corporate goals, legal requirements, and industry standards. Collaborate with other departments to create and modify operational processes and agreements and execute actions from action plans. Conduct and document regular tests for recovery, continuity plans (disaster recovery exercise, backup & data recovery, etc.) also supporting incident response tests. Implement privacy controls following the company’s governance guidelines and LGPD, GDPR, and CCPA regulations. Support the continuous improvement of compliance with ISO 27001, 27002, 22301 and 22313 standards. Monitor and conduct assessments to ensure the effectiveness of internal controls, also implementing improvements considering audits and assessments reports. Collaborate with multiple departments and headquarters to ensure effective implementation of compliance programs and provide guidance on risk-related matters to leadership. Collaborate to clarify security maturity doubts with stakeholders. Qualifications Background in IT, security, auditing, compliance and/or quality. Experience with BCP-DR based on ISO 22301 and ISO 22313, including development of procedures, execution, and documentation of tests. Experience with audits and assessments of ISO 27001 and SOC 2. Hands-on experience in executing action plans and implementing controls. Knowledge with risk management frameworks (ISO 27005, NIST etc.). Knowledge of privacy laws (LGPD, CCPA, GDPR, etc.) Advanced English proficiency. Nice to have Certification related to ISO 27001 and/or privacy (e.g., EXIN or IAPP). Experience in using Business Continuity Management (BCM) tools. Experiences with Vanta, SAT platforms, EDR, MDM, IAM. Other compliance/security certifications. Compensation Competitive salary and stock options Optional fully funded English / Spanish courses 30 days of paid annual leave Education and courses stipend Employee Giving Earn a trip anywhere in the world every 4 years Up to R$1.000/mo for meals and remote work allowance Health plan with national coverage and without coparticipation Dental Insurance: we help you with dental treatment for a better quality of life. Gympass and Sports Incentive: R$300/mo extra if you practice activities Seniority level Mid-Senior level Employment type Full-time #J-18808-Ljbffr