Information Security Governance Analyst (Mid-Level)

Job not on LinkedIn

🔥 7 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Funcional Health Tech

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 1999

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Funcional Health Tech is a company specializing in innovative technological solutions for the healthcare ecosystem, aiming to enhance efficiency and sustainability. With over 20 years of experience, they provide various services including health analytics, patient support programs, and pharmacy loyalty programs, catering specifically to the pharmaceutical industry and health insurance operators. They focus on generating data intelligence to improve health care management for businesses and healthcare providers.

📋 Description

• Develop and deliver awareness campaigns and training, adapting content and approaches to the company’s different audiences • Manage responses to customer security questionnaires, audits, and assessments by interpreting requirements, gathering information, and validating responses with the responsible teams • Organize and keep control evidence up to date, assessing its alignment with requirements and promoting its reuse in assessments, audits, and certification initiatives • Track action plans, deadlines, and outstanding items related to risks, controls, and audits, coordinating owners and next steps with the relevant teams and flagging deviations • Develop and review Information Security policies, regulations, and procedures, taking business needs and applicable controls into account • Perform control assessments based on frameworks such as CIS Controls and ISO/IEC 27001, identifying gaps and proposing improvements • Contribute to initiatives to establish and mature the Information Security Management System (ISMS) • Consolidate metrics, reports, and presentations, communicating results, risks, and priorities to different audiences, including managers and senior leadership • Identify opportunities to improve governance processes, making request tracking and evidence management more efficient

🎯 Requirements

• Completed bachelor’s degree or additional education related to Information Security, Technology, Governance, Risk, Audit, or a related field • Practical experience in GRC, Information Security, IT audit, or security-related internal controls • Certifications in Information Security, GRC, or auditing, particularly those related to ISO/IEC 27001 • Experience developing or reviewing policies and other normative documents, as well as organizing and analyzing control evidence • Experience responding to security questionnaires, audits, or assessments • Ability to interpret requirements, assess controls, identify gaps, and track action plans • Clear, assertive verbal and written communication, with the ability to adapt language for technical, business, and executive audiences • Ability to engage with different departments and organizational levels, align expectations, and manage requests with courtesy, active listening, and objectivity • Analytical thinking to connect information, identify inconsistencies, and propose solutions appropriate to the organization’s context • Organization and autonomy to manage multiple requests, negotiate deadlines and priorities, and flag when guidance or a decision is needed • Proficiency in Excel, Word, and PowerPoint, or equivalent tools • Participation in projects involving the implementation, maintenance, or certification of an ISMS based on ISO/IEC 27001 • Experience assessing control maturity and tracking improvement initiatives • Experience with awareness campaigns, training, and evaluating their effectiveness • Knowledge of privacy, personal data protection, and Brazil’s General Data Protection Law (LGPD) • Familiarity with vulnerability management, business continuity, and identity and access management • English proficiency for reading requirements and preparing responses to security questionnaires and assessments • Familiarity with tools for managing requests, action plans, and documentation

🏖️ Benefits

• Health and dental insurance • Pharmacy benefit: Funcional subsidizes part of the cost of your medications • Life insurance • Flu vaccination • Integrated health management program for employees and their dependents • TotalPass: access to gyms and wellness services • Childcare assistance • Extended maternity and paternity leave • Home office allowance (for remote positions) • Transportation allowance (for on-site positions) • Meal and food allowance • Annual profit-sharing program (for eligible positions) • Birthday day off • Ongoing professional development initiatives • Partnerships with educational institutions • Collaborative environment • Agile culture focused on continuous evolution