Associate Consultant – GRC

Job not on LinkedIn

November 25

Apply Now

Receive Emails with Similar Jobs

AuditSafe

WebsiteLinkedInAll Job Openings

Cybersecurity • Compliance • B2B

AuditSafe is a Brazilian cybersecurity and compliance consultancy that provides a broad range of services including PCI DSS and PCI PIN compliance, GRC (governance, risk and compliance), incident response, virtual CISO, privacy (LGPD) and ISO implementations, penetration testing, business continuity and segregation of duties. It delivers managed and advisory services for executives and boards, risk assessments, and a Security 360° program to help organizations strengthen information security, regulatory compliance and resilience against cyber threats.

51 - 200 employees

Founded 2005

🔒 Cybersecurity

📋 Compliance

🤝 B2B

📋 Description

• Analyze and develop security policies, proposing continuous improvements; • Assess evidence of information security controls in on-premises and cloud environments; • Support client responses to security questionnaires; • Assist clients in measuring and enforcing policies (testing, control design, and validation); • Review, identify, and assess information security and privacy risks; • Work on the Segregation of Duties (SoD) matrix and oversee its implementation; • Apply frameworks such as NIST and CIS; • Lead status meetings and perform internal audits of the Information Security Management System (ISMS).

🎯 Requirements

• Knowledge of ISO/IEC 27001, 27002, 27701, 27017, and 27018; • Experience with SOC 2; • Solid practical experience in risk management (mapping, identification, assessment, and documentation); • Experience with layers of information security controls (design, testing, and evidence collection); • General understanding of technology processes: change management, systems development, and incident management; • Lead Auditor certification for ISO 22301.

🏖️ Benefits

• Cybersecurity consulting • Security auditing • Penetration testing • Regulatory compliance • Risk management