Senior Information Security Governance Analyst

Randoncorp

Senior Analyst in Information Security Governance at Randoncorp; developing security policies and managing risk assessment programs.

Posted 5/27/2026full-timeCaxias do Sul • BrasilSeniorWebsite

About the role

Key responsibilities & impact

Develop and maintain Information Security policies, standards and procedures;
Evolve the Business Continuity program (BIA, BCP, testing);
Lead security risk management (progressing toward FAIR);
Conduct maturity assessments (ISF) and propose improvement plans (PDSI);
Support and manage cyber insurance matters (renewals, evidence, claims);
Perform vendor monitoring (risk assessment, due diligence, action plans);
Participate in audit support and follow-up (internal and external);
Respond to customer requirements and audits (questionnaires, evidence, contracts);
Produce metrics and reports to support decision-making.

Requirements

What you’ll need

Postgraduate studies in progress in Computer Science or other fields relevant to the role;
Advanced English proficiency or coursework;
ISO 27001:2013 - interpretation of the standard;
ISO 27002;
Bachelor's degree in IT, Information Security or related fields;
Experience in Information Security and/or IT Governance;
Knowledge of ISO/IEC 27005, ISO 22301 and NIST frameworks;
Knowledge of FAIR (quantitative risk) and ISF (maturity);
Experience with: security policies and controls;
Risk management;
Business continuity;
Internal and external audits;
Experience with TISAX;
Cyber insurance;
Vendor assessments;
Ability to communicate with technical and business stakeholders;
Analytical, organized and communicative profile.

Benefits

Comp & perks

Not specified 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Information Security policiesBusiness Continuity programRisk managementCyber insuranceVendor monitoringAudit supportMetrics and reportsISO 27001:2013ISO 27002NIST frameworks

Soft Skills

AnalyticalOrganizedCommunicativeAbility to communicate with stakeholders

Certifications

Bachelor's degree in ITPostgraduate studies in Computer Science