LGPD, ITIL, or Cybersecurity Analyst

• Act as a consultant on LGPD and cybersecurity projects for clients
• Prepare reports and support clients with compliance activities
• Assess information security postures and support the review of practices, policies, and processes for LGPD compliance
• Review systems and documentation; conduct analysis, requirements gathering, business rule analysis, process mapping, and data modeling
• Assess quality standards, the impact of changes, and system integrity
• Document risks, mitigation actions, manuals, and operating procedures
• Support project teams in mapping and measuring risks and defining action plans
• Support audits, simulations, and vulnerability assessments
• Work on one or more compliance projects or DPO-as-a-Service consulting engagements
• Liaise with end clients, providing guidance and reports
• Research, diagnose, plan, test, and analyze processes and data processing activities
• Train teams and recommend approaches and improvements
• Create and review internal policies and procedures
• Support testing, audits, and configurations
• Keep project documentation and the organizational knowledge repository up to date
• Meet regularly with the team and provide reports, information, and updates
• Collaborate with the consulting team to provide end-to-end guidance
• Conduct follow-ups and reinforce consulting recommendations

• Customer-focused service approach
• Prior experience in similar activities, ideally in LGPD or GDPR projects or cybersecurity Blue/Red Teams
• Bachelor’s degree in Information Technology or a related field, with relevant experience in the area and/or role
• Experience working with small or medium-sized teams of 2–4 professionals
• Practical knowledge of ISO 27001, ISO 27002, and ISO 27701
• At least one privacy-related certification, such as EXIN PDPE, EXIN PDPF, EXIN PDPP, EXIN ISFS, or a certification from IAPP, ISC2, or CompTIA
• Technical English proficiency
• Knowledge of privacy management platforms such as OneTrust
• Knowledge of DB2, Oracle, MS SQL Server, or MySQL databases
• Knowledge of Microsoft security tools, including Office 365, DLP, MDM/Intune, and PowerShell
• Knowledge of API security
• Knowledge of encryption models and implementation for data at rest
• Knowledge of cloud and on-premises environments
• Experience with vulnerability assessments and penetration testing
• Experience with WAF, DAST, IAST, and RASP tools, as well as log and traffic monitoring/analysis
• Knowledge of COBIT, ITIL, or similar frameworks is a plus

• Contractor or employee contract (PJ or CLT)
• Remote position