Senior Risk and Internal Controls Analyst
Nuclea
full-time
Posted on:
Location Type: Hybrid
Location: São Paulo • 🇧🇷 Brazil
Visit company websiteJob Level
Senior
Tech Stack
AWSCyber Security
About the role
- Strengthen our corporate governance, focusing on identifying, assessing and monitoring operational risks related to technology and information security
- Develop and maintain effective internal controls, directly contributing to increased process maturity and compliance with standards and regulations.
- Map processes and operational flows, identifying associated risks and controls.
- Identify, classify and keep operational risks and their mitigating controls up to date.
- Monitor projects and initiatives, assessing risks and proposing appropriate controls.
- Perform effectiveness tests of internal controls and follow up on action plans.
- Support the drafting and updating of policies, regulations and internal procedures.
- Develop management reports and dashboards for business areas and senior leadership.
- Support internal and external audits, providing necessary evidence and information.
- Monitor adherence to regulatory requirements and governance best practices.
Requirements
- Bachelor's degree in Information Technology, Information Security, Engineering or related fields.
- Strong experience in IT areas such as Information Security, Cybersecurity, SOC, Infrastructure, Networking and Operations.
- Advanced knowledge of risk management, internal controls and compliance.
- Proficiency with frameworks and standards such as ISO 22301, ISO 27001, NIST and ITIL.
- Familiarity with topics such as Secure Development, Digital Forensics, Vulnerability Management, Penetration Testing, Identity Management, Security Architecture and cloud environments (AWS).
- Knowledge of security solutions such as Antivirus, DLP, IDS, IPS, Web Filter, Mail Filter, Firewall, WAF, Database Monitoring and SIEM.
- Proficiency with Office suite tools such as MS Excel and MS PowerPoint.
- Advanced knowledge of Power BI.
- Strong presentation skills and ability to engage with diverse audiences.
- Knowledge of AML (Anti-Money Laundering).
Benefits
- Medical and Dental Insurance
- Meal allowance (Caju)
- Life Insurance
- Home Office Allowance
- Profit Sharing (PLR)
- Private Pension Plan
- Childcare Assistance
- WellHub (Gympass)
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
Information SecurityCybersecurityRisk ManagementInternal ControlsComplianceSecure DevelopmentDigital ForensicsVulnerability ManagementPenetration TestingIdentity Management
Soft skills
Presentation SkillsEngagement with Diverse Audiences