Information Security Consultant – GRC

AuditSafe

GRC Consultant identifying and analyzing risks in information security at AuditSafe. Executing compliance checks and supporting governance projects with a hybrid working model.

Posted 4/29/2026full-timeSão Paulo • 🇧🇷 BrazilJuniorMid-LevelWebsite

About the role

Key responsibilities & impact

Execute compliance checklists against frameworks such as NIST, ISO 27001, and ISO 27701
Lead projects related to SoD (Segregation of Duties) and RBAC (Role-Based Access Control)
Conduct internal audits (ISO 27001, ISO 27701 and/or ISO 22301)
Maintain records and incident reports
Support the update of policies and the management system
Manage documentation and monitor action plans (gap analysis)
Support mapping of information security, privacy, and enterprise risks (ISO 31000)
Share knowledge with team analysts

Requirements

What you’ll need

Bachelor’s degree in IT, Information Security, or a related field
2 to 4 years of experience in governance, risk, or compliance
Knowledge of frameworks and standards (ISO 27001, NIST, COBIT)
Experience with risk management (BIA, BCP, DRP) and ISMS
Knowledge of ITIL or COBIT (at least one)

Benefits

Comp & perks

Meal/Food allowance
Home office allowance
Birthday day off + bonus on a flexible benefits card
Health insurance
Dental insurance
Access to TotalPass (wellness, gyms, and quality-of-life benefits)

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

compliance checklistsNISTISO 27001ISO 27701Segregation of Duties (SoD)Role-Based Access Control (RBAC)internal auditsrisk managementBusiness Impact Analysis (BIA)Business Continuity Planning (BCP)

Soft Skills

leadershipcommunicationknowledge sharingorganizational skills