Senior Information Security Analyst

Sem Parar

Senior Information Security Analyst focused on managing risks, incidents, and solutions at Sem Parar Corpay in São Paulo. Ensuring confidentiality, integrity, and security of information systems.

Posted 6/10/2026full-timeSão Paulo • 🇧🇷 BrazilSeniorWebsite

Tech Stack

Tools & technologies

FirewallsLinuxTCP/IPVMware

About the role

Key responsibilities & impact

Ensure an appropriate level of security for the business by safeguarding the confidentiality, integrity and availability of information created or obtained by the company;
Lead risk management, incident response, SI monitoring, and threat/vulnerability management processes, as well as other information security processes and solutions;
Participate in Information Security projects and represent the department in projects led by other areas, ensuring appropriate risk levels and a balance between operability, costs and security requirements;
Protect the company's, its customers', and business partners' information;
Manage information security risks;
Implement information security solutions and monitor them for anomalies and suspicious activity;
Respond to information security incidents;
Manage information security threats and vulnerabilities;
Monitor and report metrics for information security processes and solutions;
Define and support the implementation of security standards (baselines) on systems and IT assets;
Participate in technical and non-technical projects that require Information Security oversight and ensure policies, procedures and standards are met;
Assist in the assessment of new technologies and business partners by identifying risks, necessary controls and ensuring these are implemented securely;
Manage IT controls, regulations and standards applicable to the company, reporting and correcting any deviations;
Review, publish and support the development of procedures, policies and other information security documents;
Participate in change, incident and problem management;
Raise employee awareness regarding Information Security;

Requirements

What you’ll need

Bachelor's degree in information technology or a related field;
Proven experience in information security;
Knowledge of ITIL, COBIT and ISO 27001;
Certifications such as CISM, CISSP or Ethical Hacking are a strong plus;
Foundations in information security;
Threat and vulnerability management;
Experience in information security incident response;
Information security risk management;
Technical information security solutions such as EDR, IPS/IDS, antimalware, endpoint protection, DLP, SIEM, PKI, among others;
Firewalls, proxies and email gateways;
VPN and other remote access technologies;
Familiarity with standards and frameworks such as PCI-DSS, ISO 27001/2, NIST, CIS, CSA, ITIL, among others;
Knowledge of platforms and operating systems such as Microsoft Windows, VMware, containers, virtualization platforms, workstations, network devices and Linux;
Networking fundamentals, TCP/IP and other communication protocols;
General concepts, policies (GPO), architecture, and account management in Microsoft Active Directory;
Creation and documentation of processes, policies and controls.

Benefits

Comp & perks

Commuter allowance (transportation voucher) or office parking;
Meal and food vouchers (flexible benefit) — balance can be distributed between options;
Health insurance;
Dental insurance;
Telemedicine — available 24 hours a day, every day of the week;
Wellhub (formerly Gympass);
Home office allowance;
Profit-sharing (PLR) according to the current policy;
Birthday day off — time off on your birthday and also on the company's anniversary;
Sem Parar tag — provided at no cost;
Life insurance;
Parental leave — paid leave for mothers, fathers or guardians to welcome a child by birth or adoption;
Education assistance — up to 25% discount on postgraduate or MBA programs;

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

information securityrisk managementincident responsethreat managementvulnerability managementEDRIPS/IDSantimalwareendpoint protectionDLP

Soft Skills

leadershipcommunicationorganizational skillsproblem managementemployee awareness

Certifications

CISMCISSPEthical Hacking