Cruzeiro do Sul Educacional S/A

Security Analyst

• Act as a leading figure in the design and evolution of IAM processes, proposing improvements that increase operational efficiency and robustness.
• Ensure evidence, controls, and responses for audits and regulatory bodies, meeting deadlines and delivering high-quality results.
• Create and standardize documentation, internal procedures, templates, and workflows, bringing organization and governance to the team.
• Develop and maintain effective internal controls capable of anticipating risks and ensuring compliance.
• Collaborate with internal teams and external partners to improve processes, integrations, and automations.
• Prepare and maintain operational procedures, standards, and IAM documentation (runbooks, playbooks, manuals, process diagrams, etc.).
• Execute and enhance internal controls, ensuring traceability, evidence, and compliance with policies and regulations.
• Support internal/external audit responses and communications with regulatory bodies, including preparing replies, submitting evidence, and tracking action plans.
• Support the identity lifecycle (Joiners, Movers, Leavers), ensuring adherence to access policies.
• Advise internal teams on implementing security best practices related to identities and access.
• Monitor metrics, access reports, exceptions, and team indicators, suggesting continuous improvements.
• Collaborate on automation initiatives, process reviews, and implementation of new controls.
• Identify access-related security gaps and propose mitigations and structural improvements.
• Participate in the development and evolution of access models and standards (RBAC, SoD, periodic reviews, etc.).

Mid-level Information Security Analyst, Focus on IAM

Compliance

• Work collaboratively in a team, share knowledge, contribute and grow with the team’s challenges, remaining innovative and resilient in day-to-day situations.
• Participate in projects and committees, foster good relationships across departments, and communicate with clarity and transparency.
• Operate with a 360° view across information and cyber security activities; participate in Privacy and Security projects and committees.
• Contribute to the development of information security policies, processes, procedures, RFPs and RFIs.
• Create and maintain policies, standards, processes and procedures for information and cyber security, as well as KPIs and continuous controls.
• Serve as a point of reference and support for the team on market frameworks such as NIST/ISO27K/CIS/CSA, policies, standards, processes, audits, data protection and continuous controls.
• Knowledge of and operational management experience with solutions such as DLP (Data Loss Prevention), Information Classification, Email Encryption and CASB (Cloud Access Security Broker) for data protection.
• Lead the vendor assessment process for information and cyber security.
• Drive the information security awareness program and conduct workshops across the company.
• Engage in committees, squads and other forums to provide guidance on information security policies and practices based on frameworks such as ISO 27001, NIST, CIS, CSA; familiarity with GDPR and LGPD is a plus.
• Work cross-functionally with incident response teams, participate in cyber exercises, cyber war games, CTFs and other team and partner activities.
• Stay alert to emerging scenarios and current cyber threat trends.

Mid-level Security Analyst, GRC Focus

Analyst

• Atuar no time de Martech CRM como responsável técnico pelo desenvolvimento e evolução de chatbots inteligentes na plataforma Blip
• Executar entregas técnicas de TI, incluindo integrações com sistemas internos e externos, aplicação de IA, testes, governança e sustentação das soluções conversacionais
• Desenvolver e manter chatbots voltados para jornadas de marketing, atendimento e conversão
• Integrar Blip com plataformas de CRM, automação de marketing e mensageria
• Criar fluxos conversacionais personalizados com foco em engajamento e performance
• Monitorar KPIs dos bots e propor melhorias com base em dados e comportamento do usuário
• Aplicar técnicas de IA para aprimorar a experiência conversacional e automações inteligentes

Mid-level Information Security Analyst, Focus on IAM

Mid-level Security Analyst, GRC Focus

Senior Plataforma Blip