Senior Information Security Analyst

Job not on LinkedIn

🕒 3 days ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

🔐 Security Analyst

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Open for 3 days.
• Jobs at this company usually fill in 25 days.
• No salary listed.

Apply Now

Check your resume score

Customize resume + cover letter

Find Similar Remote Jobs

☆ Save☑️ Mark as applied❌ Hide

Report problem

Spassu

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1992

💼 Consulting

📦 Logistics

📣 Marketing

Consulting • Logistics • Marketing

Spassu is a Brazilian company specializing in end-to-end digital transformation solutions. With over 30 years of experience, Spassu focuses on maximizing value delivery by simplifying processes and improving decision-making throughout its partners' journeys. The company employs experts in user experience, design thinking, and agile methodologies to co-create innovative solutions that meet the needs of diverse industries. By leveraging a multidisciplinary approach and applying best practices like ITIL and LEAN, Spassu facilitates continuous improvement and ensures the effective implementation of IT services across various sectors.

📋 Description

• Ensure the integrity, confidentiality, and availability of information assets • Respond to security incidents • Manage security tools • Analyze risks and regulatory compliance, including data privacy • Serve as the technical and strategic liaison between security operations and senior management • Analyze risks associated with the client's governance activities and their potential impacts • Support senior leadership with information on risks arising from vulnerabilities and security incidents • Work closely with Spassu's Governance, Compliance, and Risk team • Contribute to reports, metrics, and risk treatment plans

🎯 Requirements

• A duly registered bachelor's degree in Information Technology or a related field • OR a bachelor's degree in any field, plus a postgraduate certificate in Information Technology or a related field, consisting of at least 360 hours and issued by an institution recognized by Brazil's Ministry of Education (MEC) • At least one GRC certification: ISFS ISO/IEC 27001, CRISC, CBCP, CISA, PMP, or a certification in a GRC solution • At least one advanced-level security certification: CISSP, CISM, OSCP, GCFA, GNFA, CASP+, CCNP Security, CCIE Security, LPIC-3, or CEH • At least three solution-specific training courses covering IPS, firewalls, DDoS protection, load balancing, email filtering, and web content filtering • Eight years of experience in information security preferred • Experience with the triage, containment, and remediation of security incidents, with a focus on personal and sensitive data breaches (LGPD/GDPR) • Experience administering, configuring, and generating reports from SIEM, NGFW, EDR/XDR, WAF, and IAM solutions • Knowledge of scanning tools such as Nessus and Qualys for identifying and prioritizing infrastructure and application vulnerabilities • Knowledge of ISO/IEC 27001, 27005, and 27701 standards and Brazil's LGPD is a plus • Experience with public-sector contracts and service levels is a plus • Experience with GRC tools such as Archer and ServiceNow IRM is a plus

🏖️ Benefits

• Health Insurance • Dental Insurance • Life Insurance • Food or Meal Allowance • Transportation Allowance • Wellhub (formerly Gympass)

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume