Information Security Analyst (Mid-level)

Vero

Information Security Analyst involved in managing IT security controls and incident responses. Focused on compliance with standards and guiding teams on security best practices.

Posted 6/19/2026full-timeSão Paulo • 🇧🇷 BrazilMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

FirewallsLinux

About the role

Key responsibilities & impact

Monitor and manage security controls in IT environments, identifying threats and proposing corrective measures.
Execute and coordinate responses to security incidents, including root-cause analysis and preventive actions.
Perform vulnerability assessments and penetration tests, identifying weaknesses and recommending improvements.
Implement and review information security policies, ensuring compliance with standards such as ISO 27001, LGPD and others.
Configure and monitor security tools such as firewalls, IDS/IPS and SIEM solutions.
Coordinate internal and external security audits and propose action plans to address non-conformities.
Maintain and update business continuity and disaster recovery plans, conducting periodic tests.
Develop security performance reports and metrics for senior management.
Support the review and adjustment of vendor contracts with respect to information security.
Train and guide employees on security best practices and compliance with corporate policies.

Requirements

What you’ll need

Bachelor's degree
Proficiency in network security and systems administration (Windows/Linux).
Experience with SIEM tools, firewalls, VPN, IDS/IPS and encryption.
Knowledge of vulnerability assessment and conducting penetration tests.
Knowledge of security frameworks such as ISO 27001, NIST or COBIT
Strong analytical and problem-solving skills to mitigate risks and propose effective solutions.
Ability to work independently and lead small projects within the security area.
Communication skills to interact with technical teams and managers at different levels.
Results-oriented with a focus on continuous improvement of security processes.
Commitment to confidentiality and ethics in handling sensitive data.
Proactive with a sense of urgency in responding to security incidents.
Preferred:
Postgraduate degree in Information Security, IT Management or related areas.
Security certifications (CISSP, CISM, CompTIA Security+).
Experience with personal data protection (LGPD/GDPR).
Familiarity with digital forensics and advanced incident response.
Experience with DLP (Data Loss Prevention) solutions.
Previous experience in information security projects and crisis management.
Knowledge of IT infrastructure.
Ability to work with various IT areas and security solution vendors.
Ability to adapt to technological changes and new security challenges
Experience working in multidisciplinary teams and collaborative projects.

Benefits

Comp & perks

Meal allowance / Food voucher
Transportation voucher
Health insurance
Dental insurance
Life insurance
PPR (Performance-Based Profit Sharing Program)
Growth opportunities
Childcare allowance
Allowance for employees with children with disabilities (PCD)
Day Off (One day off during your birthday month)
TotalPass (Discounts for gyms and sports)
Corporate University
PAS (Vero Social Assistance Program)

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

network securitysystems administrationvulnerability assessmentpenetration testingsecurity frameworksfirewallsSIEM toolsIDS/IPSencryptiondisaster recovery

Soft Skills

analytical skillsproblem-solving skillsindependent workleadershipcommunication skillsresults-orientedcommitment to confidentialityproactiveadaptabilitycollaboration

Certifications

CISSPCISMCompTIA Security+