Senior GRC Security Specialist

Job not on LinkedIn

🔥 1 hour ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CI&T

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1995

💼 Consulting

🏥 Healthcare

📣 Marketing

💰 $5.5M Venture Round on 2014-04

Consulting • Healthcare • Marketing

CI&T is a global tech transformation specialist focusing on helping organizations navigate their technology journey. With services spanning from application modernization and cloud solutions to AI-driven data analytics and customer experience, CI&T empowers businesses to accelerate their growth and maximize operational efficiency. The company emphasizes digital product design, strategy consulting, and immersive experiences, ensuring a robust support system for enterprises in various industries.

📋 Description

• Maintain and enhance the Cybersecurity Risk Management Process • Continuously identify, log, and analyze control nonconformities and unresolved or high-risk vulnerabilities across different sources • Maintain the Risk Registry • Deliver timely risk treatment updates and reports to stakeholders • Execute annual third-party cybersecurity risk assessments aligned with internal risk standards and external compliance requirements • Maintain and enhance the cybersecurity control framework • Map existing controls and collect evidence of execution • Identify gaps and nonconformities • Align overlapping requirements under a unified structure • Ensure adherence to HITRUST, HIPAA, and Spain ENS certification frameworks • Create and maintain cybersecurity-related policies and procedures • Ensure documentation complies with regulatory and contractual standards

🎯 Requirements

• Located in Brazil • Advanced English for communication with international clients • Excellent communication skills, with the ability to collaborate effectively with technical and non-technical stakeholders • Strong analytical and problem-solving skills, with the ability to make informed decisions in high-pressure situations • Ability to conduct cybersecurity risk assessments, identify potential vulnerabilities, and recommend strategies to mitigate risks • Ability to collaborate with cross-functional teams to ensure GRC policies, procedures, and controls are effectively communicated and implemented • Ability to lead efforts to maintain and update documentation related to GRC processes, including risk assessments, policies, and procedures • Ability to participate in internal and external audits, providing support and documentation to demonstrate compliance • Strong understanding of GRC frameworks, industry standards, and regulatory requirements • Excellent analytical skills and attention to detail • Ability to work independently and in cross-functional teams

🏖️ Benefits

• Health and dental insurance • Meal and food allowance • Childcare assistance • Extended paternity leave • Partnership with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass • Profit Sharing and Results Participation (PLR) • Life insurance • Continuous learning platform (CI&T University) • Discount club • Free online platform dedicated to physical, mental, and overall well-being • Pregnancy and responsible parenting course • Partnerships with online learning platforms • Language learning platform • Inclusion support and accommodations during the selection process • Dedicated Health and Well-being team, inclusion specialists, and affinity groups