Senior Technology and Cyber Risk Analyst

• Conduct IT, cybersecurity, and technology architecture risk assessments
• Develop and enhance the Risk Appetite Framework, including KRIs and tolerance thresholds
• Manage TPRM through due diligence and continuous monitoring of vendors
• Execute RCSAs and validate control effectiveness across critical processes
• Assess risks associated with product launches and pre-production technology changes
• Report technical exposure to C-level stakeholders in terms of business impact
• Support SOX, BACEN, and regulatory audits by providing evidence and conducting walkthroughs
• Promote a risk-aware culture through training and awareness initiatives

• 5+ years of experience in IT risk management, cybersecurity, or GRC within the technology, fintech, or financial services sectors
• Hands-on experience with risk assessments, risk appetite, KRIs, and RCSA
• Proficiency in ISO 27001, NIST CSF, COSO, and/or COBIT frameworks
• Experience with TPRM and risk assessments for critical vendors
• Ability to translate technical risks into measurable business impact
• Certifications such as CISA, CRISC, CISSP, CISM, or ISO 27001 Lead Auditor
• Experience conducting cloud risk assessments in AWS, GCP, or Azure
• Knowledge of SOX, BACEN regulations (Resolutions 3909/4658), or LGPD
• Proficiency with GRC tools such as ServiceNow, Archer, or OneTrust
• Experience with data analysis using SQL, Power BI, or Python
• Experience with AI governance and AI model risk assessment