Data Security Specialist

🕒 July 29

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 43%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

iFood

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

🍽️ Food & Beverage

📦 Logistics

📣 Marketing

Food & Beverage • Logistics • Marketing

iFood is a leading food delivery platform based in Brazil, connecting customers with a wide array of restaurants and food options. The company leverages cutting-edge technology and artificial intelligence to improve customer experience, streamline operations, and enhance delivery logistics. iFood fosters a diverse and inclusive work environment, focusing on sustainability and the positive impact of its services on the community.

📋 Description

• Operate and evolve DLP and ZTNA controls for endpoints, cloud applications, and communication channels. • Implement and enforce data classification policies and handling procedures for internal users and third parties. • Configure and maintain security controls for corporate SaaS platforms, including Databricks, Salesforce, and Google Workspace. • Implement and enforce document retention and disposal policies. • Run the insider threat program and analyze anomalies in coordination with HR and Legal. • Manage device posture policies and ZTNA enforcement. • Conduct security reviews of production data architecture, evaluating APIs, ETL pipelines, and file transfers. • Execute the Data Security workstream within the Third-Party Risk Management process. • Promote security by design across engineering and data teams. • Ensure data residency, encryption in transit and at rest, and appropriate access controls. • Support LGPD, GDPR, and PCI-DSS compliance programs as the technical point of contact. • Implement AI tools for anomaly detection, data classification, DLP tuning, and investigation acceleration. • Track and report measurable outcomes driven by AI. • Build and maintain operational dashboards, metrics, runbooks, playbooks, and Data Security procedures. • Coordinate with Legal, Product, Engineering, IT, CSIRT, and the Data Security Manager. • Manage exception requests and participate in the response to high-impact incidents. • Execute the technical roadmap and Sensitive Data Mapping initiatives.

🎯 Requirements

• Proven experience as a Data Security Specialist, Analyst, or Engineer, with a track record of technical ownership for a Data Security domain. • Strong experience in data protection, DLP, ZTNA, and information security governance. • Solid understanding of Zero Trust architecture principles and their practical implementation, including ZTNA, conditional access, device posture, and identity-based segmentation. • Deep knowledge of security hardening for enterprise SaaS platforms, including Google Workspace, Salesforce, Databricks, other platforms, and emerging AI-based platforms. • Knowledge of data architecture concepts, including APIs, ETL pipelines, data warehouses, cloud data platforms, and production data exchange patterns. • Familiarity with regulatory frameworks, including LGPD, GDPR, PCI-DSS, and BACEN and PROUF regulatory requirements. • Hands-on experience with AI tools for Data Security, including anomaly detection, automated classification, DLP tuning, or investigation acceleration, with documented, tangible, and measurable results. • Strong analytical and investigative skills, with the ability to trace a data leak from the initial signal to its root cause and translate findings into systemic recommendations. • Cross-functional collaboration skills, with the ability to drive technical outcomes in partnership with Legal, Engineering, Product, and IT while balancing security requirements with business velocity. • Ability to document and create runbooks, playbooks, and operational procedures for Data Security. • Advanced English proficiency (required).