Riachuelo

Security Operations

• Operate and manage the SIEM tool.
• Design and implement new use cases in the SIEM according to the defined strategy.
• Perform tuning and refinement of SIEM and SOAR tools.
• Ensure that the rules defined in the SIEM are correct and properly correlating.
• Operationalize the plan to define, test, and validate use cases in the SIEM.
• Monitor security incidents and create action plans incorporating lessons learned to refine the tools.

Senior Security Monitoring Analyst

• Operate and manage network security tools such as firewalls, microsegmentation, proxy, NDR, WAF, DNS, anti‑DDoS, and others.
• Ensure security controls for systems, maintaining operational continuity and resilience.
• Prepare performance reports for tools and provide recommendations for improvements.
• Investigate and resolve incidents and problems related to security tool malfunctions.
• Continuously tune and optimize performance so security tools remain up to date and enforce the correct policies to protect the environment.
• Work directly with the SOC team to support investigations and with infrastructure teams to ensure security tools are fully operational and performing as intended.

Senior Network Security Analyst – SecOps

Risk

• Responsible for managing the portfolio and increasing/reducing limits for the credit card portfolio;
• Responsible for developing credit policies for Card products (portfolio management) and payroll-deductible loans (consigned loans);
• Will propose and develop solutions that maximize portfolio results through the use of new data and quantitative methods;
• Prepare analyses that support the implementation of new policies for the products managed by the area;
• Work with understanding and manipulation of key credit risk metrics.

Senior Credit Risk Analyst – Credit Policies

Analyst

• Apoiar a empresa na estruturação e evolução da gestão de identidade e acesso em cloud, estabelecendo padrões e boas práticas
• Desenhar, implementar e manter perfis de acessos na Cloud aplicando os princípios de menor privilégio para times de infraestrutura, desenvolvimento, dados, segurança, entre outros.
• Definir e administrar IAM Roles e Policies especificas por função, garantindo segregação de responsabilidades.
• Definir, implantar e suportar o serviço de IAM Roles e STS para acesso humano e não humano.
• Apoiar auditorias e requisitos de compliance

Analista Sênior de IAM Cloud

Security Engineer

• Create, review, and maintain Information Security processes based on NIST (CSF and/or SP 800).
• Design and lead the implementation of an Information Security Management System (ISMS) aimed at ISO/IEC 27001 certification.
• Ensure all security processes include: process classification, criticality assessment, and performance indicators (KPIs and KRIs).
• Define, document, and standardize workflows, roles, and responsibilities (RACI) for security processes.
• Serve as the focal point for internal and external audits, including ISO audits and regulatory audits.
• Support internal teams in complying with security processes and requirements.
• Monitor process effectiveness and propose continuous improvements based on indicators and audit results.

Senior Process Analyst – Information Security

• Operar o processo de gestão de riscos de Segurança da Informação de forma contínua, atuando como uma esteira estruturada: recebimento, análise, parecer técnico e recomendação de plano de ação.
• Realizar análises de risco considerando impacto, probabilidade, controles existentes e risco residual.
• Elaborar pareceres executivos de risco, com recomendações claras e priorizadas.
• Acompanhar a execução dos planos de ação, realizando follow-ups recorrentes e reportando status, desvios e riscos residuais.
• Manter e acompanhar os principais riscos estratégicos de segurança, alinhados ao Plano Diretor e às prioridades do negócio.
• Atuar de forma integrada com BISOs, Arquitetura, Avaliação de Fornecedores, Red Team e demais áreas técnicas, utilizando essas frentes como fontes qualificadas de identificação de riscos.
• Apoiar a criação, manutenção e evolução da matriz de riscos de Segurança da Informação.
• Construir e manter dashboards executivos de riscos, garantindo visibilidade clara para liderança e comitês estratégicos.
• Apoiar e participar de comitês de risco e segurança, preparando materiais de reporte e subsidiando tomadas de decisão.
• Trabalhar em estreita parceria com a Gerência de Estratégia e Riscos, garantindo alinhamento estratégico, visão integrada e evolução contínua do modelo de riscos.

Analista Sênior de Riscos de Segurança da Informação

• Ensure information security rules, policies and best practices are applied across all retail products, services and operations, including digital channels, physical stores, back-office operations and partners.
• Act as the Information Security focal point for the Retail Directorate, supporting strategic decisions with risk perspective, operational impact and business continuity considerations.
• Support secure design of retail solutions and systems, applying Security by Design and Privacy by Design principles across the customer journey.
• Evaluate and provide guidance on architectures related to:
• Systems used in stores (POS, checkout terminals, TEF)
• Physical and digital payment methods
• Omnichannel platforms and channel integrations
• Integrations with suppliers, logistics partners and third-party services
• Perform risk and security assessments on system integrations, considering threats such as fraud, unavailability, data leakage and operational impact.
• Implement and lead Threat Modeling activities during analysis, planning and solution evolution phases.
• Design and recommend security controls aligned with frameworks such as NIST, ISO 27000, CIS Controls and CSA CCM, taking into account the specific retail context.
• Support the implementation of Zero Trust concepts and the Principle of Least Privilege across corporate, store and cloud environments.
• Maintain and evolve the security controls and requirements library tailored to retail business needs.
• Work collaboratively with Technology, Operations, Stores, Logistics, Payments, Marketing teams and external partners.

Senior Information Security Analyst, Retail

• Operate and manage security tools such as EDRs, antivirus, password vaults, digital certificates, SSE, SIEM, and others.
• Ensure security controls for systems, guaranteeing continuity and operational resilience.
• Prepare performance reports for security tools and provide recommendations for improvements.
• Troubleshoot and resolve incidents and issues related to the malfunctioning of security tools.
• Continuously tune and optimize tool configurations and performance to keep security solutions up to date and enforce correct policies to protect the environment.
• Work directly with the SOC team to support investigations and with infrastructure teams to ensure security tools are operating at full capacity.

Senior SecOps Analyst – Endpoint

• Serve as the technical lead responsible for creating, monitoring, and measuring the development of Grupo Guararapes' information security strategy.
• Design, define, and oversee a cyber resilience program that accounts for cyber-attack scenarios.
• Manage and measure cyber controls using metrics and indicators associated with the Master Plan.
• Maintain the strategic planning with the group's key stakeholders, with customizations for each type of business.

Security Strategy Specialist

• Lider técnico do time de arquitetura, auxiliando o time nas demandas e atividades.
• Definição de arquiteturas e padrões de segurança.
• Realizar estudos e PoCs de novas soluções de segurança, a fim de buscar a melhor solução para a necessidade da empresa.
• Definição e condução do roadmap tecnológico de segurança.

Especialista de Segurança da Informação – Arquitetura de Segurança

• Structure and manage incentive programs (short-, medium- and long-term), linking performance and compensation;
• Support and enhance salary cycles, including merit programs, promotions and review of job and salary structures;
• Participate in strategic compensation projects with an analytical perspective and the ability to propose evidence-based solutions;
• Conduct benchmarking studies, market analysis and salary range reviews;
• Support HR Business Partners and leadership in compensation decisions with technical rationale and business insight;
• Work on recognition strategies and total rewards, connecting data, culture and results;
• Translate analyses into clear executive materials with data, storytelling and strategic recommendations.

Compensation Analyst – Senior

Product Manager

• Manage the Young portfolio with strategic and operational oversight;
• Define assortment and build the product matrix in collaboration with the Style team;
• Monitor performance by channel (sales, margin, inventory, turnover, coverage);
• Interface with areas such as Planning, Style, and Supply to ensure delivery accuracy;
• Define sourcing strategy (domestic/imported), considering quality and lead time;
• Actively participate in Product team rituals and the company's strategic committees.

Mid-level Product Manager – Young Fashion

Data Scientist

• Predictive and Statistical Modeling: Develop, train, and validate predictive models applied to the loan product lifecycle and customer management, such as propensity and churn models;
• Data Management and Feature Engineering: Explore, structure, and enrich internal and external datasets to generate high-performance features for lending use cases, and ensure data quality, governance, and traceability of model inputs;
• CRM Products and Strategy: Create intelligent segmentations for loan origination and cross-sell campaigns, and support business teams in defining strategies to increase conversion;
• Analysis and Experimentation: Conduct exploratory and causal analyses to understand drivers of customer behavior, as well as design and evaluate A/B tests to validate loan portfolio offers;
• Production and Scalability: Collaborate with data engineers and technology teams to ensure model deployment with monitoring, performance, and fairness metrics;
• Advisory Role: Support Product, CRM, Credit, and Risk stakeholders in customer data–driven decision making.

Data Scientist – Loans

Procurement

• Negotiate with domestic and international suppliers;
• Monitor purchase requests, inventory control, and replenishment;
• Contribute to the development and qualification of new products and suppliers;
• Produce reports and strategic analyses to support decision-making;
• Liaise across departments and support alignment between the factory and other teams.