Senior GRC Analyst, IT Controls

Job not on LinkedIn

🕒 March 13

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Arco Educação

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Arco é uma companhia brasileira focada em soluções educacionais para o ensino básico que desenvolve conteúdo, tecnologia e serviços para mais de 1.3 milhões de alunos e +5.000 escolas privadas de todo o país, abrangendo os segmentos da educação infantil ao ensino médio.

📋 Description

• Continuous Information Security audit (Design and Operating Effectiveness testing): perform periodic technical tests to validate that designed security controls are operating as intended; • Data Governance and Technical Autonomy: contribute to the company's data governance; • Maturity and Gap Management (CIS/NIST): lead maturity assessments, identify gaps, define remediation priorities, and act as escalation point for high‑risk blockers with technical teams; • Vulnerability Management: manage cyber risk based on CSPM events and vulnerability scanners; • Audit Support: act as the technical focal point for external and internal audits, organizing evidence and translating audit requirements for technical teams; • Data Protection (DLP/Classification): audit and enforce the correct implementation of DLP controls and adherence to the data classification policy across complex Data Lake and multi‑database environments; • Process Improvement; • Tracking and monitoring action plans.

🎯 Requirements

• Strong GRC and Risk knowledge: familiarity with risk analysis methodologies (ISO 31000, ISO 27005, quantitative and qualitative approaches); • Hands‑on experience in database security, Data Lakes, and cloud security architecture (AWS/GCP); • Framework expertise: solid practical knowledge of CIS Controls (v8) and NIST CSF; • Understanding of ISO 27001/27002; • Technical and audit background (Tests of Design and Tests of Effectiveness — ToD/ToE); • Productivity tools: advanced Excel/Google Sheets and familiarity with Jira.

🏖️ Benefits

• Meal and/or food allowance • Health and dental insurance • Transportation allowance • Extended maternity and paternity leave • Childcare assistance • Employee well‑being: partnerships with Wellhub and Zenklub • Education support/incentives • Discounts on airline tickets • Partnership for pet health insurance • Access to Arco educational materials for employees' children • Partnerships for MBA and postgraduate programs