Information Security Analyst – ISO 27001

Job not on LinkedIn

🔥 0 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Nasajon Sistemas

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 1982

🤝 B2B

☁️ SaaS

👥 HR Tech

B2B • SaaS • HR Tech

Nasajon Sistemas is a Brazilian enterprise software company with over 40 years in the market that develops and delivers integrated ERP solutions focused on accounting, financial, fiscal and payroll management. It serves businesses across segments (retail, distribution, industry, services) and specialized accounting firms, offering modules for contabilidade, financeiro, fiscal, folha, PDV, estoque, compras and BPO-focused services. Nasajon also provides an AI platform (ANA) for payroll/BPO efficiency, implementation and support services, and training for customers to ensure compliance with Brazilian tax legislation and digital transformation.

📋 Description

• Serve as the primary point of contact with the consultancy responsible for the ISO/IEC 27001 certification project; • Support the implementation, continuous improvement, and maintenance of the ISMS; • Interpret and apply ISO/IEC 27001 requirements; • Lead and monitor gap analyses, action plans, risks, and controls; • Support the development and review of Information Security policies, standards, and procedures; • Coordinate documentation and evidence for audits; • Monitor internal and external audits, nonconformities, and remediation plans; • Promote collaboration among Information Security, IT, Legal, Compliance, Human Resources, and other departments; • Track metrics, deadlines, risks, and progress throughout the certification process.

🎯 Requirements

• Bachelor’s degree in Technology, Information Security, Information Systems, Computer Science, Engineering, Business Administration, or a related field; • Professional experience in Information Security, GRC, and Compliance; • Proven practical experience with ISO/IEC 27001, particularly in implementation, compliance, certification, maintenance, or recertification; • Knowledge of ISMS and Information Security controls; • Experience with risk management, gap assessments, and action plans; • Experience preparing audit evidence and supporting audits; • Strong organizational skills to manage multiple activities, deadlines, and stakeholders; • ISO/IEC 27001 Lead Implementer, Lead Auditor, or Internal Auditor certification; • Knowledge of ISO/IEC 27005, NIST, CIS Controls, or COBIT; • Knowledge of Brazil’s LGPD and data privacy; • Experience with GRC tools; • Experience working at companies that have undergone ISO/IEC 27001 certification processes.

🏖️ Benefits

• Employment under Brazil’s CLT labor regime; • 100% remote work; • Flexible working hours, with a focus on deliverables; • Food and meal allowances (VA and VR); • Health insurance; • Digital Hospital; • Dental insurance; • Wellhub; • Partnership with Sesc; • Life insurance; • Funeral assistance.