Compliance

• Ensure that Governance, Risk and Compliance (GRC) processes related to information security, identity and access management are aligned with international best practices (ITIL, COBIT, ISO 27001).
• Define, implement and maintain GRC policies, standards and procedures aligned with corporate strategy and applicable regulations (LGPD, GDPR, SOX, among others).
• Monitor key performance indicators (KPIs) and compliance reports, ensuring adherence to frameworks such as ITIL and COBIT.
• Conduct internal and external audits, coordinating remediation action plans for non-conformities.
• Ensure IT processes are aligned with business strategy and organizational objectives.
• Identify, assess and mitigate risks related to information security and access management.
• Develop and maintain the corporate risk map, prioritizing preventive and corrective actions.
• Lead the IAM strategy, ensuring secure and efficient provisioning, review and revocation of access.

Governance, Risk & Compliance Manager – GRC, IAM, Access Management

Ethics and Compliance Analyst (Mid-level)

Analista Ética e Compliance JR

Senior Compliance Analyst – Suppliers