Information Security Specialist – Cybersecurity

N5X

Specialist in Information Security and Cybersecurity at N5X, responsible for protecting technological assets and information integrity. Work in a dynamic environment with a focus on collaborative problem-solving.

Posted 6/11/2026full-timeSão Paulo • 🇧🇷 BrazilMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

CloudFirewalls

About the role

Key responsibilities & impact

Technically lead the implementation of the guidelines of the Information and Cybersecurity Master Plan, the Technology Services and Information and Cybersecurity Management Policy, and other related policies across the Company's infrastructure
Design, deploy, configure, tune and monitor network and cloud security tools, including but not limited to firewalls, IPS/IDS, EDR (Endpoint Detection and Response), WAF, encryption solutions and Data Loss Prevention (DLP) systems
Configure and administer the Identity and Access Management (IAM) architecture, ensuring enforcement of the principle of least privilege, segregation of duties and the requirement for Multi-Factor Authentication (MFA) across all corporate systems
Translate the steps of the Cyber Incident Response Plan into practice by defining and documenting the technical workflows for triage, containment, eradication and recovery
Develop and deliver information security and data protection training and simulated phishing campaigns for N5X employees and third parties
Collaborate with other directorates on the implementation of N5X policies and standards, for example supporting the Directorate of Operations and Risk in structuring and conducting inaugural tests (failover and recovery tests) of the Business Continuity Plan (BCP) and the Disaster Recovery Plan (DRP)
Proactively monitor technology environments to identify threats, vulnerabilities and anomalous behavior
Participate in detection, containment, mitigation, response and recovery procedures for cyber incidents (e.g., ransomware, DDoS attacks and phishing), coordinating post‑incident reviews (post‑mortems) and post‑incident reports
Coordinate and support the execution of penetration tests (pentests), systemic vulnerability scans and disaster recovery tests
Support the assessment, due diligence and continuous monitoring of security controls implemented by critical vendors, third‑party services and multi‑cloud environments

Requirements

What you’ll need

Proven knowledge: Solid understanding of the regulations from the Central Bank of Brazil (BCB) and the Brazilian Securities and Exchange Commission (CVM) related to cyber risk—particularly BCB Resolution 304/2023 and CVM Resolution 135/2022—LGPD, and international security frameworks such as ISO/IEC 27001/27002, NIST CSF and CPMI/IOSCO principles
Critical analysis: Strong ability to triage security alerts, identify root causes of cyber incidents and propose effective remediation plans for vulnerabilities
Organization: Ability to manage multiple priorities, maintain structured processes during crisis situations and support the continuous review of the Information and Cybersecurity Master Plan and related policies
Communication: Excellent communication skills to report risks and security anomalies to the Executive Board/Directors and to act as a facilitator in promoting an information security culture
Technology: Technical proficiency in operating and managing perimeter and internal defense tools (firewalls, WAF, IPS/IDS, EDR, anti‑malware systems) and cloud security architectures
Education: Bachelor's degree in Computer Science, Computer Engineering, Information Systems, Systems Analysis and Development (ADS), Information Security, IT Management or related fields
Experience: Proven prior experience in Information Security and Cybersecurity roles, preferably at institutions operating financial market infrastructure (IOSMF) or entities heavily regulated by the BCB/CVM
Hands‑on experience with Security Operations Center (SOC) routines, incident response and execution of Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP)
Experience with regulatory compliance and audit processes
English: Fluent/advanced (written and spoken)

Benefits

Comp & perks

Bonus: Up to 2 monthly salaries per year
Work model: Hybrid — 3 days in the office per week; attendance at team in‑person rituals (currently quarterly), in‑person stakeholder meetings and events
Meal allowance: BRL 43.68 per working day
Food allowance: BRL 832.00 per month
Transportation: Round‑trip coverage for in‑office days with no payroll deduction
Health plan: SulAmérica with co‑payment for the primary holder and dependents (children and spouse)
Life insurance: MetLife
Childcare assistance: Reimbursement of up to 40% of base salary for children up to 24 months and 35% for children between 24 and 71 months
Financial assistance for employees with children with disabilities: Amount corresponding to 50% of base salary

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

network securitycloud securityfirewallsIPSIDSEDRWAFencryption solutionsData Loss PreventionIdentity and Access Management

Soft Skills

critical analysisorganizationcommunicationability to manage multiple prioritiesstructured processes during crisis situationsfacilitator in promoting information security culture

Certifications

ISO/IEC 27001ISO/IEC 27002NIST CSF