Senior Information Security Administrator

🔥 5 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Lanlink Informática Ltda.

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 1988

🔒 Cybersecurity

🤖 Artificial Intelligence

IT • Cybersecurity • Artificial Intelligence

Lanlink Informática Ltda. is a Brazilian technology company that specializes in providing IT infrastructure and services tailored to improve business productivity across various sectors. They offer solutions in data management, artificial intelligence, cybersecurity, and productivity enhancement, focusing on both the private and public sectors, including agriculture, education, energy, finance, and retail. With decades of experience, Lanlink is dedicated to modernizing the technological landscape of organizations, ensuring efficiency and effectiveness in their operations through innovative technological solutions.

📋 Description

• Develop, implement, and enhance information security policies, standards, procedures, and controls aligned with best practices and institutional requirements. • Define and apply hardening policies for operating systems, servers, applications, databases, network devices, and other technology assets. • Propose continuous improvements to operational processes related to information security, risk management, and corporate asset protection. • Monitor the technology environment to identify emerging threats, vulnerabilities, and suspicious behavior, proposing and implementing mitigation measures. • Conduct detailed analyses of logs, events, and security indicators to identify incidents, anomalies, and potential compromises. • Conduct internal information security audits, assessing the effectiveness of implemented controls and proposing improvements. • Perform periodic assessments of security maturity and posture, identifying gaps and opportunities to enhance adopted processes and technologies. • Support the preparation, review, and updating of information security standards, procedures, and policies. • Prepare technical and executive reports related to incidents, risks, vulnerabilities, compliance, and security control performance. • Investigate information security incidents, identifying root causes, impacts, exploited vulnerabilities, and corrective measures to prevent recurrence. • Conduct digital forensic analyses of critical incidents, identifying attack vectors, technical evidence, chains of events, and impacts on the corporate environment. • Develop and execute security incident response plans, including containment, eradication, recovery, and lessons learned activities. • Plan, coordinate, and execute cyberattack simulation exercises, including advanced scenarios such as APTs, ransomware, and distributed attacks. • Assess and mitigate risks related to Shadow IT, identifying unauthorized assets, services, and applications used in the corporate environment. • Assess, validate, and recommend new information security technologies, solutions, and tools, considering technical requirements, risks, and benefits. • Work collaboratively with infrastructure, development, and operations teams to integrate security requirements and controls into corporate processes and systems. • Support the implementation of security practices in applications, services, architectures, and secure development processes. • Conduct assessments and audits based on ISO 27001/27002, CIS Controls, SANS, OWASP, and CNJ regulations. • Define, monitor, and analyze information security indicators, metrics, and KPIs. • Participate in technology and information security risk management, proposing treatment and mitigation plans. • Develop disaster recovery and business continuity strategies for critical systems, applications, and services. • Define, document, and test procedures for restoring technology environments after incidents, operational failures, or disasters. • Identify and classify critical systems, defining RTOs and RPOs. • Plan, implement, and validate operational continuity strategies. • Conduct periodic contingency, disaster recovery, and business continuity exercises and tests. • Develop action plans for contingency scenarios involving infrastructure failures, cyberattacks, service unavailability, and natural disasters. • Test and validate redundant environments, contingency servers, backups, and alternative communication and operating mechanisms. • Define the roles, responsibilities, and operating procedures of teams involved in incident response, contingency, and operational continuity. • Structure and maintain internal and external communication flows for crisis situations. • Consolidate information from service requests, incidents, vulnerabilities, and information security-related demands. • Provide technical support and specialized guidance to security, infrastructure, development, and governance teams. • Serve as a technical reference in information security, risk management, business continuity, and disaster recovery. • Perform other activities related to information security, digital asset protection, and ICT service continuity management.

🎯 Requirements

• Bachelor’s degree in Information Technology or a related field. • At least five (5) years of experience in the stated specialty, in critical, high-availability corporate environments, demonstrated through employment records or a statement from a public or private institution. • ITIL 4 training with a minimum workload of twelve (12) hours. • Official ITIL 4 Foundation certification or higher. • One of the following certifications: ECSA (EC-Council Certified Security Analyst), CySA+ (CompTIA Cybersecurity Analyst), ECIH (EC-Council Certified Incident Handler), or CSIH (Certified Specialist Incident Handler). • Solid experience in Information Security, Risk Management, Incident Response, Forensic Analysis, Security Governance, Business Continuity (BCP), Disaster Recovery (DR), Vulnerability Management, and Compliance. • Knowledge of ISO 27001/27002, CIS Controls, SANS, OWASP, SIEM, SOC, Cloud Security, log analysis, security indicators, and CNJ regulations will be considered an advantage.

🏖️ Benefits

• Hapvida, Bradesco, or Unimed health insurance (available according to region) • Hapvida Odonto or Bradesco Dental insurance • Meal or food allowance • Life insurance fully funded by Lanlink • Transportation allowance • Gympass • Auster • Pharmacy benefit • Partner college and university program • Corporate Education Platform • Welcome-to-the-world baby kit • Moodar Platform