Lead comprehensive non-financial risk assessments, with a focus on technology and business continuity.
Orchestrate and monitor corporate Disaster Recovery (DR) testing programs, including technical tests, walkthroughs, and tabletop simulations.
Define and advise on disaster recovery strategies for critical technology environments.
Serve as the focal point during real technological crisis events, supporting response coordination and communication.
Conduct BIAs and impact analyses in critical areas, identifying continuity risks and technology dependencies.
Develop and enhance internal BCM and Crisis Management methodologies aligned with major frameworks (ISO 22301, ISO 27001, ISO 22361).
Assess organizational resilience maturity and propose structured improvement plans.
Ensure adherence to applicable regulations (BCB, CVM, ANBIMA).
Lead independent assessments of IT and Information Security risks, focusing on technological continuity.
Analyze emerging risks (cloud, APIs, AI, critical third parties) and propose mitigating actions.
Establish, monitor, and evolve risk indicators (KRIs/KPIs), correlating incident and vulnerability data.
Prepare executive reports and strategic opinions to support decision-making.
Act as an internal consultant, influencing decisions and promoting resilience best practices.
Mentor junior and mid-level analysts, supporting their technical and methodological development.

Bachelor's degree in IT, Engineering, Computer Science, or related fields.
Solid experience in Business Continuity, Disaster Recovery, and/or IT Risk.
Hands-on experience conducting DR tests and defining technological contingency strategies.
Experience with contingency environments and high-availability architectures (on-premise and cloud).
Knowledge of cloud providers (AWS, Azure, GCP).
Familiarity with frameworks: ISO 22301, ISO 27001, ISO 22361, NIST, and COBIT.
Knowledge of financial market regulations (BCB, CVM, ANBIMA).
Experience defining and managing risk indicators (KRIs/KPIs).
Analytical capability to handle complex scenarios and perform "what-if" analyses.
Clear communication for interaction with technical and executive audiences.
Autonomy, systemic vision, and ability to influence without formal authority.
Certifications in continuity, risk, or security (ISO 22301, ISO 27001, CISM, CRISC, CISSP).
Experience with data and analytics tools (Power BI, SQL, Python, etc.).
Knowledge of risk quantification.
Experience integrating GRC, BI, and automation (RPA).
Familiarity with Data Lakes, Analytics, or Risk Intelligence Hubs.
Knowledge of AI/ML applied to risk management (differential).

14th and 15th fixed salaries
Profit sharing (according to seniority)
Health and Dental plans with no co-pay
Well-being programs with Wellhub (formerly Gympass), Nutrition, Psychology, Occupational Health, Massage, Running group and local gym
Meal Allowance and Food Allowance – flexible % allocation between cards (VA/VR), no co-pay
Extended maternity and paternity leave
Childcare or nanny allowance for children up to 6 years and 11 months
Allowance for children with disabilities, no age limit
Life insurance
Private pension up to 8% of salary
Training platform – Sicredi Aprende, offering various courses
40-hour workweek – using a time bank system
Home office allowance (except for positions requiring 100% on-site)

Analista de Riscos, Continuidade de Negócios SR – Disaster Recovery

Key skills