Compliance

• Manage and maintain ISO 27001, SOC 2, GDPR and LGPD programs, ensuring ongoing compliance.
• Use and administer the Vanta platform to automate controls, monitor evidence, and support audits.
• Coordinate internal and external audits, produce evidence, and track remediation plans.
• Map and assess corporate and information security risks, proposing mitigation plans.
• Support the creation and updating of internal security and privacy policies, standards, and procedures.
• Monitor compliance metrics and prepare governance reports for leadership.
• Contribute to responses for due diligence requests, RFPs, and customer security questionnaires, translating technical controls into business language.
• Support security and privacy awareness and training initiatives.

Senior Information Security Analyst – Governance, Risk and Compliance

Analista Pleno de Segurança da Informação – White Team, GRC

Mid-level Security Analyst, GRC Focus

GRC and Data Privacy Consultant

Analista Jurídico – Compliance Jr.