IT Governance and Information Security Specialist

Logicalis Brasil

Consultant in IT Governance and Information Security working on technology projects for various clients. Responsible for ensuring quality, efficiency, and compliance in solution development.

Posted 6/22/2026full-timeBarueri • 🇧🇷 BrazilMid-LevelSeniorWebsite

About the role

Key responsibilities & impact

Responsible for working on IT consulting projects focused on IT Governance, Information Security and Privacy, executing activities with a degree of autonomy and technical guidance for internal and external clients to design solutions tailored to business needs with quality, efficiency and compliance, ensuring expected satisfaction while meeting planned timelines and costs. Activities include risk identification, strategy definition, solution implementation and opportunity mapping, in addition to supporting area results and indicators and, occasionally, assisting in the training and development of other team members.
Lead, guide and participate in the development and delivery of consulting projects in Information Security and IT Governance within the defined scopes, providing support in cases of high complexity when needed;
Structure and support the definition of methodological approaches and the organization of projects, ensuring alignment with deadlines, costs and quality expectations;
Proactively identify issues and perform root-cause analysis to propose definitive solutions or appropriate workarounds, managing operational challenges with greater autonomy and receiving relative guidance in higher-complexity situations;
Map, assess, prioritize, design, optimize and implement improvements and adjustments to processes that are part of the Information Security strategy and technologies;
Elicit project requirements, prepare and review documents/deliverables (policies, procedures, flows, presentations, supporting materials and other project artifacts);
Lead technical and/or executive presentations and meetings with clients and internal teams, alone or together with other professionals from the area;
Ability to work on multiple projects in parallel while maintaining delivery quality and stakeholder communication;
Direct and support the team in identifying needs and proposing continuous improvement actions related to project scopes and, where applicable, also impacting area processes;
Identify and develop insights and opportunities for new consulting projects, contributing to the ongoing evolution of the area;
Contribute to leading projects with medium-to-high complexity scope;
Know the area’s processes, able to identify their repository and application, as well as corporate policies and guidelines, ensuring their use in professional activities.

Requirements

What you’ll need

Practical experience working in consulting, implementation, maintenance or operation of processes and projects related to Governance, Information Security and Privacy, balancing technical knowledge and analytical skills, with exposure to medium-to-high complexity demands and leading activities and deliverables;
Experience in planning, structuring and implementing measures to align information security and privacy controls, such as: implementation/maintenance of certifications (ISO 27001, 27701, 22301, 42001...), assessment/evaluation of security and privacy controls using industry frameworks, evaluation and definition of information security management models, risk and vulnerability management and analysis, third-party risk management (TPRM), structuring/review of access management and Segregation of Duties (SoD), definition of recommendations for processes, people and technologies, development of roadmaps focused on the evolution and compliance of information security, development of BCP/BIA/DRP or related plans, definition and structuring of KPIs, design of data inventory processes, among other IS-related topics;
Solid experience executing projects using major industry frameworks and methodologies related to security and IT, such as ISO 27001, ISO 27701, ISO 22301, ISO 42001, NIST, CIS, SIM3, ITIL, COBIT, among others;
Knowledge of other market frameworks and methodologies, such as Project Management (PMBoK and agile methodologies) and Process Modeling (BPMN);
Familiarity with regulations and laws such as LGPD, GDPR and the Brazilian Marco Civil da Internet;
Ability to prepare and present management and executive materials with strong command of Microsoft Office tools (PowerPoint, Excel, Word); knowledge of Power BI is considered a plus;
Hold one or more intermediate-level technical certifications in the field or equivalent knowledge;
English (advanced reading, intermediate writing, intermediate speaking) and Spanish (intermediate reading, basic writing, basic speaking); higher proficiency levels are considered advantages;
Knowledge of commercial solutions and applications in the environment; it is a plus to have a deeper understanding of technology environments including corporate architectures and analytical skills to understand problems and applicable technologies, considering the impact of technology and information security on the business;
Bachelor’s degree in exact sciences (Engineering, Computer Science, Mathematics), economic fields (Economics, Business Administration) or similar (not exhaustive); MBA and/or postgraduate studies in areas relevant to the role are considered advantages.

Benefits

Comp & perks

Health insurance
Dental insurance
Meal and food vouchers
Private pension
Life insurance
Childcare assistance
Commuter allowance
Employee assistance program
Totalpass
Birthday off
Work from Anywhere

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

IT GovernanceInformation SecurityPrivacyRisk ManagementVulnerability ManagementThird-party Risk ManagementBusiness Continuity PlanningData Inventory ProcessesISO 27001NIST

Soft Skills

LeadershipCommunicationAnalytical SkillsProblem SolvingProject ManagementTeam SupportStakeholder CommunicationAutonomyContinuous ImprovementTraining and Development

Certifications

ISO 27001 CertificationISO 27701 CertificationISO 22301 CertificationISO 42001 CertificationNIST CertificationCIS CertificationITIL CertificationCOBIT CertificationIntermediate-level Technical CertificationsMBA