Senior Information Security Analyst

Biomm

. Develop, review, and maintain Information Security policies, standards, and procedures .

Posted 9/18/2026full-timeNova Lima • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Security Governance, Risk, and Compliance (GRC), with a strong focus on developing and maintaining security policies, conducting compliance assessments, and managing risk related to projects and vendors. Proficient in implementing Information Security frameworks such as NIST CSF and ISO 27001, while ensuring business continuity and disaster recovery plans are effectively defined and monitored.

Highest-signal resume keywords

Information Security GovernanceRisk ManagementCompliance AssessmentsNIST CSF ImplementationISO 27001 Maintenance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security PoliciesRisk Matrix ManagementKPI DevelopmentVulnerability ManagementBusiness Continuity PlanningDisaster Recovery PlanningInformation Security FrameworksRegulatory ComplianceCloud Security AssessmentEvidence Organization

Soft Skills

Analytical ThinkingAttention to DetailCommunication Skills

Tools & Technologies

DashboardsExecutive Reporting Tools

Industry Keywords

Pharmaceutical SectorHealthcare SectorFinancial SectorLGPD Compliance

About the role

Key responsibilities & impact

Develop, review, and maintain Information Security policies, standards, and procedures
Conduct compliance assessments and monitor remediation plans, prioritizing actions based on identified risks
Assess risks related to projects, systems, and new technologies, maintaining the risk matrix and corresponding treatment plans
Assess risks related to vendors, outsourced services, and cloud solutions
Support internal audits, regulatory and Compliance requests, and LGPD-related matters, keeping evidence organized
Develop and monitor KPIs, KRIs, dashboards, and executive reports on Information Security maturity
Define and maintain business continuity and disaster recovery plans (BCP/DRP) related to Information Security
Develop Information Security awareness initiatives and training programs
Support the vulnerability management process by conducting criticality analyses, defining remediation plans, and tracking deadlines
Contribute to the continuous improvement of Information Security Governance processes, controls, and practices

Requirements

What you’ll need

Bachelor’s degree in Information Technology or a related field
Solid experience in Information Security Governance, Risk, and Compliance (GRC)
Hands-on experience with Information Security frameworks, particularly NIST CSF and/or ISO 27001, including implementation and ongoing maintenance
Experience working in regulated environments, particularly in the pharmaceutical, healthcare, or financial sectors
English proficiency for reading and interpreting technical documentation
Availability to work Monday through Friday, from 7:30 a.m. to 4:30 p.m.
Work location: Nova Lima, Brazil

Benefits

Comp & perks

Medical insurance
Dental insurance
Pharmacy benefit
Profit-sharing program (PLR)
Private pension plan
On-site cafeteria
Meal allowance
Transportation allowance
Company shuttle
Birthday day off
GymPass
Extended maternity leave program
Life insurance
Extended paternity leave