Information Security Specialist

Role Overview

• Define, drive, and evolve the Information Security strategy aligned with organizational objectives;
• Use data and Artificial Intelligence to:
• Identify patterns and anticipate risks;
• Support prioritization of initiatives;
• Generate insights for decision-making;
• Increase the operational efficiency of the Information Security Strategy and Governance team.
• Structure and strengthen governance practices, data security, and AI-applied security;
• Lead and evolve the Information Security governance model, ensuring alignment with industry frameworks and regulatory requirements;
• Act as a link between technical, executive, and business areas, translating risks and priorities clearly and strategically;
• Support prioritization of initiatives based on risk, impact, and business value.
• Ability to prioritize based on risk and value;
• Continuous alignment with the organization's strategic objectives;
• Ability to translate guidelines into actionable execution plans;
• Ability to structure and analyze security metrics and indicators.
• Clear, concise communication tailored to different audiences (technical and executive);
• Ability to influence decisions and drive engagement;
• Ability to interact smoothly across different areas and hierarchical levels;
• Comfort in environments of ambiguity and constant transformation;
• Strong results orientation, focused on generating measurable impact;
• Serve as a strategic interface between technology, security, and the business;
• Translate technical topics into executive language to support decision-making;
• Influence and support teams in advancing security practices;
• Contribute to the development of organizational maturity and strengthening of governance.

Requirements

• Bachelor's degree in Information Security, Information Technology, Strategy, or related fields;
• Knowledge of Information Security strategy and governance;
• Proficiency with security and governance frameworks (ISO 27001, NIST, CIS, COBIT, among others);
• Familiarity with data security and AI governance;
• Experience with maturity models, risk management, and controls;
• Knowledge of market trends and security best practices (e.g., use of analytics and data-driven security).

Benefits

• Fixed 14th and 15th-month salary payments;
• Profit-sharing and performance participation (depending on seniority);
• Health and dental plans with no copayment;
• Well-being programs via Wellhub (formerly Gympass): Nutrition, Psychology, Occupational Health, Massage, running groups, and local gym membership;
• Meal (VR) and Food (VA) vouchers — flexible split between cards, no copayment;
• Extended maternity and paternity leave;
• Childcare or nanny allowance for children up to 6 years and 11 months;
• Support allowance for children with disabilities, no age limit;
• Life insurance;
• Private pension plan up to 8% of salary;
• Training platform — Sicredi Aprende, offering a variety of courses;
• 40-hour workweek — using a time bank system;
• Telework allowance (except for positions that require 100% on-site presence).