Analista Sênior de Segurança da Informação

Grow your career with us

You are on a journey to join an exciting Company and be part of our success story to improve lives by developing resources sustainably. Here we offer you an exciting and dynamic work environment and will equip you with the know-how that will stretch and enhance your career journey.

Responsibilities:

Act in protecting the organization's information assets through the implementation and maintenance of cybersecurity solutions. Responsible for performing technical activities, leading strategic security initiatives, supporting compliance with applicable standards and regulations, and effectively contributing to the mitigation of cyber risks. Must ensure that the organization is aligned with current security guidelines, standards, and regulations in Brazil, reporting directly to specialists or area managers.

You are on a journey to join an exciting Company and be part of our success story. Here we will equip you with the know-how and experience that will define your growth. In this role that you are about to embark on, you are required to carry out the following responsibilities:

•  Participate in information security projects, leading technical initiatives.

• Conduct risk assessments, penetration tests (pentests), and security audits.

• Respond to security incidents, carrying out investigations and preparing reports.

• Implement and maintain security tools such as firewalls, antivirus, SIEM, IAM, among others.

• Conduct internal training and cybersecurity awareness programs.

• Support compliance with standards such as ISO 27001, NIST, PCI-DSS, and regulations such as LGPD and GDPR.

• Assess risks related to vendors and third-party partners.

• Collaborate with other departments to ensure the secure implementation of new systems.

• Create and standardize processes and procedures, as well as develop IT documentation, SOWs, specifications, and others.

To be successful in this role, it is recommended that you should have the following skills and qualifications:

• Bachelor's degree in Computer Science, Computer Engineering, Information Systems, or related fields. A postgraduate degree or specialization in Information Security is desirable.

• Information security certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CEH (Certified Ethical Hacker), CompTIA Security+, ISO 27001 Lead Implementer, among others, are highly valued.

• Minimum of 4 to 6 years of experience in Information Security, with proven involvement in relevant projects.

• Solid understanding of network protocols and system architecture.

• Proficiency in security tools such as firewalls, VPNs, IDS/IPS, antivirus, SIEM, and IAM.

• Knowledge of cryptography, multi-factor authentication (MFA), and access controls.

• Familiarity with data protection standards and regulations such as LGPD, GDPR, and ISO 27001.

• Strong analytical skills, problem-solving ability, clear communication, and teamwork.

• Methodical and well-organized.

• Proactive, ethical, and continuously updated on cybersecurity trends and threats.

• Advanced English proficiency.

Disclaimer:

When you send us your resume and personal details, it is deemed you have provided your consent to us retaining your information in our talent recruitment database. All information provided will only be used for the recruitment process. RGE will only collect, use, process or disclose personal information where and when allowed to under applicable laws.

Only shortlisted candidates will be contacted for an interview. We endeavour to respond to every applicant. However, if you do not receive a response from us within 60 days, please consider your application for this position unsuccessful. We may contact you in the future for any opportunities that match your qualifications and experience.

Thank you for considering a career with RGE.