Advisor SME – GRC, IRM

🔥 41 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Vision Cybersecurity

WebsiteLinkedInAll Job Openings

501 - 1000 employees

🔒 Cybersecurity

Cybersecurity

Vision Cybersecurity is a cybersecurity-focused company. The available information is mostly website/CSS fragments and Portuguese UI text (e. g. , 'Siga nossas redes sociais', 'Ouça o Podcast Safetalks'), which indicates the company maintains an online presence and produces content such as a podcast. There are no explicit details about specific products, services, customers, or company size in the provided text. Based on the name and the content, the primary focus is cybersecurity.

📋 Description

• Conduct Risk Posture Reviews, maturity workshops and assessments with CISOs, CROs, DPOs and Executive Boards; • Design GRC/IRM programs and solutions: taxonomies, RCSAs, KRIs, workflows, dashboards and policies; • Advise clients on the use of RSA Archer and other GRC platforms (ServiceNow, IBM OpenPages, MetricStream); • Support regulatory compliance with BACEN/CVM, LGPD, PCI-DSS, Open Finance, SGCN and resilience frameworks; • Support AML/CFT programs, digital fraud prevention and financial crime governance; • Structure AI Governance programs based on ISO 42001, NIST AI RMF and the EU AI Act; • Support technical pre-sales: RFPs, proposals and discovery workshops.

🎯 Requirements

• 8 years in cybersecurity, GRC, compliance or IT audit; • 5 years with direct focus on IRM/GRC — consultancy, systems integrator or regulated financial institution; • Functional expertise in RSA Archer (modules, workflows, integrations); • Applied knowledge of frameworks: NIST CSF 2.0, ISO 27001/27005, ISO 31000, COBIT, COSO, FAIR, MITRE ATT&CK; • Regulatory experience: CMN 4.893, BCB 94, LGPD, PCI-DSS, BCB 44/2021 (AML/CFT); • Knowledge in AI Governance: ISO 42001, NIST AI RMF, EU AI Act; • Executive communication — comfortable with Board, Executive Management and regulators, • ** ** • **Will be a differential:** • GRC/Risk certifications: CRISC, CISM, CISA, CISSP, ISO 27001 Lead Auditor/Implementer, Open FAIR; • Platform certifications: RSA Archer Certified, ServiceNow GRC Specialist; • AI certifications: ISO/IEC 42001 Lead Auditor/Implementer, NIST AI RMF Practitioner, CompTIA SecAI+; • Experience in specialized consulting or security systems integrator with a client portfolio in the regulated financial sector; • Integration of GRC with DevSecOps, SIEM, SOAR, vulnerability management, IAM/IGA or cloud security; • Experience in Purple Team or threat-informed defense with interfaces to risk and compliance processes; • Knowledge of Open Finance, advanced BCM, ESG/anti-corruption in a regulatory context; • Intermediate/advanced Spanish for LATAM projects.

🏖️ Benefits

• 🩺 Bradesco Top National health plan; • 🦷 Odontoprev dental plan; • 🌱 Life insurance; • 📱 Pipo Saúde: Digital health and corporate benefits broker; • 🏋️‍ TotalPass: Platform connecting you to various networks to support your and your family's wellbeing; • 🚌 Commuter allowance; • 💳 Alelo Tudo: Food and Meal on a single card; • 💰 Private Pension: Double match — VISION contributes alongside you; • 🎂 Birthday day off: A day off in your birthday month; • 🤝 Referral bonus: Earn money for successful referrals; • 📚 Discounts at educational institutions; • 🍼 Vision Baby Kit: Because new beginnings deserve care and celebration; • 🔅 Exclusive discounts with the SESC group: Leisure for you and your family; • 💻 Welcome kit: We prepare a super kit to support your day-to-day work; • ☕ Morning and afternoon breakfast with fruit on in-office days.