Riachuelo

Administrative Assistant

• Support supply chain management;
• Interact with suppliers to address inquiries;
• Complete documentation for production licensing at suppliers;
• Periodically update control spreadsheets.

Administrative Assistant, Supply Chain

Customer Success Manager

• Lead advanced data analyses to strategically define audiences, segmentations, and business opportunities;
• Develop and evolve campaign strategies and relationship journeys across the entire customer lifecycle, focusing on growth, retention, and monetization;
• Explore complex databases using SQL to extract and cross-reference relevant information such as credit profiles, predictive models, etc.;
• Interpret data and analytical results, turning analyses into actionable insights, strategic recommendations, and action plans;
• Define, monitor, and analyze CRM performance indicators (KPIs), proposing continuous optimizations and guiding decision-making;
• Plan and analyze A/B tests to optimize campaigns, communications, and journeys;
• Serve as a technical and strategic CRM reference, acting as a bridge between Product, Marketing, Data, Technology, and Operations teams;
• Contribute to the definition, evolution, and governance of CRM processes, tools, and data architecture;
• Oversee, together with the OPS team, the execution of multichannel campaigns (email, push, SMS, WhatsApp, etc.), ensuring consistency, personalization, and ongoing support;
• Influence and mobilize stakeholders, promoting strategic alignment, prioritization of requests, and data-driven CRM decision-making;
• Support the dissemination of a data-driven culture and analytical best practices within the CRM area.

Senior CRM Analyst

Analyst

• Support short-, medium- and long-term sales planning, including analyses and scenario projections;
• Monitor and produce reports on performance indicators such as Margin, Inventory, PMV (Average Selling Price), Markdown and product portfolio;
• Contribute to defining and monitoring the assortment plan, balancing depth, coverage and opportunities by product group;
• Perform periodic analyses of the product portfolio, identifying stockout risks, excess inventory and opportunities to improve turnover;
• Support presentations and alignments with other areas, focusing on data and action-oriented plans.

Junior Planning Analyst, Footwear

Procurement

• Direct support to management, assisting with routine tasks in the commercial department;
• Manage purchase orders from issuance through to receipt;
• Adjust purchase orders in SAP;
• Keep material master data updated in SAP;
• Liaise with suppliers, handling daily needs (sample control, scheduling, follow-ups, etc.);
• Prepare and analyze weekly reports;
• Analyze product performance;
• Interact with various company departments to achieve final results.

Purchasing Assistant

• Responsible for analyzing, approving and controlling rental contract payments, ensuring contractual compliance, correct adjustments and resolution of inconsistencies;
• Manage relationships with shopping center administrators, support the area’s budgeting activities, and liaise with internal departments such as accounting, treasury, expansion and stores;
• Perform financial and accounting analyses in SAP and maintain efficient controls in Excel (intermediate/advanced level).

Payments Analyst – Occupancy Cost

• Support short-, medium- and long-term sales planning, including scenario analyses and projections;
• Monitor performance indicators such as margin, inventory, average selling price (ASP), markdowns, and product portfolio;
• Participate in In-Season and OTB (Open to Buy) discussions, aligning purchase forecasts, inventory and sales targets;
• Contribute to the definition and monitoring of the assortment plan, balancing depth, coverage and opportunities by product group;
• Conduct periodic analyses of the product portfolio to identify stock-out risks, excess inventory and turnover opportunities;
• Support presentations and alignments with other areas, focusing on data and action-oriented plans.

Junior Planning Analyst – Kids

Backend Engineer

• Develop new features aligned with business needs;
• Provide maintenance and improvements for legacy systems;
• Ensure technical quality by applying development best practices and design patterns;
• Work with technologies such as Java, Angular, and TypeScript.

Senior Systems Analyst, Java

• Responsible for replenishing products to stores;
• Sorting products by groups;
• Providing support to stores;
• Liaising with multiple departments;
• Preparing reports;
• Supporting the team with daily activities.

Supply Analyst, Mid-level

Security Engineer

• Preparação: Desenvolver políticas, procedimentos e planos de resposta a incidentes.
• Detecção e Análise: Monitorar sistemas para identificar e investigar possíveis incidentes de segurança. Isso pode envolver a análise de logs de segurança, tráfego de rede e alertas de segurança.
• Contenção e Erradicação: Tomar medidas para conter o incidente e evitar que ele se espalhe.
• Recuperação: Restaurar sistemas afetados e garantir que eles voltem a operar normalmente. Isso inclui a restauração de serviços e a revisão das medidas de segurança.
• Análise Pós-Incidente: Realizar uma análise detalhada do incidente para identificar lições aprendidas e implementar melhorias para evitar incidentes futuros.
• Relatórios e Documentação de Incidentes: Redigir relatórios detalhados sobre os incidentes, seguindo os padrões de documentação definidos pela companhia, e mantê-los organizados para análises futuras e auditorias.
• Análise forense e investigação: Quando ocorre um incidente de segurança, se realiza análises forenses para determinar a causa raiz, identificar os invasores e coletar evidências para possíveis ações legais. Essa análise detalhada ajuda a evitar futuros incidentes e melhorar as medidas de segurança existentes.
• Desenvolvimento de políticas e procedimentos: Contribuir para o desenvolvimento e implementação de políticas e procedimentos de segurança da informação. Isso inclui a criação de diretrizes de segurança, padrões de configuração, boas práticas e controles de segurança para garantir conformidade a regulamentos e normas;
• Recomendações de Melhorias: Propor ajustes em processos, políticas e controles de segurança com base nos aprendizados adquiridos nas análises de incidentes, visando aprimorar a resiliência contra ameaças.

Analista Pleno, CSIRT – Blue Team

• Translate complex Information Security topics for different non-technical audiences in a clear, educational, and engaging manner.
• Plan, execute, and maintain an annual security awareness calendar aligned with the organization's risks and priorities.
• Propose, develop, and deliver training and awareness initiatives, including campaigns, learning paths, communications, and recurring activities.
• Use generative AI to create educational materials, visual content, scripts, and awareness videos.
• Define and monitor engagement and effectiveness metrics for awareness initiatives (participation, retention, behavior, and risk evolution).
• Operate and oversee phishing simulation platforms, including planning, execution, result analysis, and corrective actions.
• Work in partnership with business areas, HR, and Communications to expand the reach and effectiveness of initiatives.

Mid-level Information Security Awareness Analyst

Marketing

• Ensure that information security rules, policies and best practices are applied to systems, processes and vendors in back-office areas such as Legal, HR, Marketing and corporate functions.
• Serve as the Information Security focal point for leaders in these areas, supporting decisions focused on risk, compliance, privacy and reputation.
• Support secure design of corporate solutions by applying Security by Design and Privacy by Design principles from conception.
• Evaluate and advise on architectures and solutions related to HR systems (HCM, payroll, benefits, recruitment), legal systems, contract and document management, marketing platforms, CRM, campaign automation and customer data, corporate SaaS tools and integrations with third parties.
• Perform risk and security assessments for new system and vendor engagements, considering data protection, access controls, integrations and third-party dependencies.
• Implement and conduct Threat Modeling, when applicable, for corporate solutions and sensitive integrations.
• Design and recommend security controls aligned with frameworks such as NIST, ISO 27000, CIS Controls and CSA CCM, tailoring them to the context of corporate areas.
• Support implementation of Zero Trust concepts and the Principle of Least Privilege in corporate and SaaS environments.
• Maintain and evolve the library of security controls and requirements, focusing on corporate applications and third parties.
• Work in partnership with Legal, Privacy, HR, Marketing, Procurement and strategic vendors.

Mid-level Information Security Analyst, BISO Back Office – Legal, HR, Marketing and Corporate Areas

Security Operations

• Operate and manage security tools such as EDRs, antivirus, password vaults, digital certificates, SSE, SIEM, and others.
• Ensure security controls for systems, maintaining continuity and operational resilience.
• Prepare tool performance reports and provide recommendations for improvements.
• Resolve incidents and problems related to malfunctioning security tools.
• Continuously tune and optimize performance so security tools remain up to date and enforce the correct policies to protect the environment.
• Work directly with the SOC team to support investigations and with infrastructure teams to ensure security tools are fully operational and effective.

Mid-level SecOps Analyst – Endpoint

• Preparation: Develop incident response policies, procedures and plans.
• Detection and Analysis: Monitor systems to identify and investigate potential security incidents. This may involve analysis of security logs, network traffic and security alerts.
• Containment and Eradication: Take measures to contain incidents and prevent further spread.
• Recovery: Restore affected systems and ensure they return to normal operation. This includes service restoration and review of security controls.
• Post-Incident Analysis: Conduct detailed incident analysis to identify lessons learned and implement improvements to prevent future incidents.
• Incident Reporting and Documentation: Draft detailed incident reports following company documentation standards and maintain organized records for future reviews and audits.
• Forensic Analysis and Investigation: When a security incident occurs, perform forensic analysis to determine root cause, identify attackers and collect evidence for potential legal action. This detailed analysis helps prevent future incidents and improves existing security measures.
• Policy and Procedure Development: Contribute to the development and implementation of information security policies and procedures. This includes creating security guidelines, configuration standards, best practices and security controls to ensure compliance with regulations and standards;
• Improvement Recommendations: Propose adjustments to processes, policies and security controls based on lessons learned from incident analyses to enhance resilience against threats.

Senior Blue Team Analyst – CSIRT

• Define security architectures and standards.
• Conduct studies and proof-of-concepts (PoCs) for new security solutions to identify the best fit for the company's needs.
• Define and drive the security technology roadmap.
• Define security standards for cloud environments: Azure, AWS and Google Cloud.

Senior Cloud Security Architect

• Implement security solutions spanning multiple technology layers, including networks, access controls, endpoints, cloud, and data protection, ensuring robust protection and compliance with security policies.
• Act as a technical lead on complex security projects, applying specialized knowledge of protective controls and detection of cyberattacks.
• Manage project scope, schedule, and work plans for cybersecurity initiatives, ensuring organization, timely delivery, and effectiveness of implemented controls.
• Collaborate with partner companies during project execution, overseeing technical direction and ensuring delivery of solutions aligned with security requirements.