Senior Information Security Administrator

• Develop, implement, and enhance information security policies, standards, procedures, and controls aligned with best practices and institutional requirements.
• Define and apply hardening policies for operating systems, servers, applications, databases, network devices, and other technology assets.
• Propose continuous improvements to operational processes related to information security, risk management, and corporate asset protection.
• Monitor the technology environment to identify emerging threats, vulnerabilities, and suspicious behavior, proposing and implementing mitigation measures.
• Conduct detailed analyses of logs, events, and security indicators to identify incidents, anomalies, and potential compromises.
• Conduct internal information security audits, assessing the effectiveness of implemented controls and proposing improvements.
• Perform periodic assessments of security maturity and posture, identifying gaps and opportunities to enhance adopted processes and technologies.
• Support the preparation, review, and updating of information security standards, procedures, and policies.
• Prepare technical and executive reports related to incidents, risks, vulnerabilities, compliance, and security control performance.
• Investigate information security incidents, identifying root causes, impacts, exploited vulnerabilities, and corrective measures to prevent recurrence.
• Conduct digital forensic analyses of critical incidents, identifying attack vectors, technical evidence, chains of events, and impacts on the corporate environment.
• Develop and execute security incident response plans, including containment, eradication, recovery, and lessons learned activities.
• Plan, coordinate, and execute cyberattack simulation exercises, including advanced scenarios such as APTs, ransomware, and distributed attacks.
• Assess and mitigate risks related to Shadow IT, identifying unauthorized assets, services, and applications used in the corporate environment.
• Assess, validate, and recommend new information security technologies, solutions, and tools, considering technical requirements, risks, and benefits.
• Work collaboratively with infrastructure, development, and operations teams to integrate security requirements and controls into corporate processes and systems.
• Support the implementation of security practices in applications, services, architectures, and secure development processes.
• Conduct assessments and audits based on ISO 27001/27002, CIS Controls, SANS, OWASP, and CNJ regulations.
• Define, monitor, and analyze information security indicators, metrics, and KPIs.
• Participate in technology and information security risk management, proposing treatment and mitigation plans.
• Develop disaster recovery and business continuity strategies for critical systems, applications, and services.
• Define, document, and test procedures for restoring technology environments after incidents, operational failures, or disasters.
• Identify and classify critical systems, defining RTOs and RPOs.
• Plan, implement, and validate operational continuity strategies.
• Conduct periodic contingency, disaster recovery, and business continuity exercises and tests.
• Develop action plans for contingency scenarios involving infrastructure failures, cyberattacks, service unavailability, and natural disasters.
• Test and validate redundant environments, contingency servers, backups, and alternative communication and operating mechanisms.
• Define the roles, responsibilities, and operating procedures of teams involved in incident response, contingency, and operational continuity.
• Structure and maintain internal and external communication flows for crisis situations.
• Consolidate information from service requests, incidents, vulnerabilities, and information security-related demands.
• Provide technical support and specialized guidance to security, infrastructure, development, and governance teams.
• Serve as a technical reference in information security, risk management, business continuity, and disaster recovery.
• Perform other activities related to information security, digital asset protection, and ICT service continuity management.

• Bachelor’s degree in Information Technology or a related field.
• At least five (5) years of experience in the stated specialty, in critical, high-availability corporate environments, demonstrated through employment records or a statement from a public or private institution.
• ITIL 4 training with a minimum workload of twelve (12) hours.
• Official ITIL 4 Foundation certification or higher.
• One of the following certifications: ECSA (EC-Council Certified Security Analyst), CySA+ (CompTIA Cybersecurity Analyst), ECIH (EC-Council Certified Incident Handler), or CSIH (Certified Specialist Incident Handler).
• Solid experience in Information Security, Risk Management, Incident Response, Forensic Analysis, Security Governance, Business Continuity (BCP), Disaster Recovery (DR), Vulnerability Management, and Compliance.
• Knowledge of ISO 27001/27002, CIS Controls, SANS, OWASP, SIEM, SOC, Cloud Security, log analysis, security indicators, and CNJ regulations will be considered an advantage.

• Hapvida, Bradesco, or Unimed health insurance (available according to region)
• Hapvida Odonto or Bradesco Dental insurance
• Meal or food allowance
• Life insurance fully funded by Lanlink
• Transportation allowance
• Gympass
• Auster
• Pharmacy benefit
• Partner college and university program
• Corporate Education Platform
• Welcome-to-the-world baby kit
• Moodar Platform