IT Requirements and Governance Specialist

Iguá Saneamento

. Work within the Information Security Department, leading Governance, Risk and Compliance (GRC) and Identity and Access Management (IAM/IGA) initiatives .

Posted 10/27/2026full-timeSão Paulo • BrazilMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Governance, Risk and Compliance (GRC) and Identity and Access Management (IAM/IGA), with a strong focus on maintaining security policies, managing risks, and ensuring compliance with regulatory standards. Proficient in leading audits, implementing security frameworks, and enhancing organizational security culture.

Highest-signal resume keywords

Governance, Risk And Compliance (GRC)Identity And Access Management (IAM/IGA)ISO/IEC 27001/27002Risk ManagementIT General Controls (ITGC)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk Register ManagementRole-Based Access Control (RBAC)Security Policy DevelopmentVulnerability ManagementIncident Response

Soft Skills

Analytical SkillsWritten And Verbal CommunicationOrganizational SkillsInterpersonal Skills

Tools & Technologies

IGA PlatformsIAM PlatformsPAM SolutionsGRC Tools

Certifications & Qualifications

ISO/IEC 27001

Industry Keywords

NIST CSFLGPDSegregation Of Duties (SoD)Internal AuditsSecurity Awareness Programs

About the role

Key responsibilities & impact

Work within the Information Security Department, leading Governance, Risk and Compliance (GRC) and Identity and Access Management (IAM/IGA) initiatives
Maintain and enhance the Information Security policy and standards framework
Coordinate responses to financial and regulatory audits
Ensure segregation of duties across corporate systems and strengthen the security culture
Support the operation and continuous improvement of the Information Security Management System (ISMS), including scope, Statement of Applicability, Annex A controls, internal audits, and management review
Lead Information Security risk management by maintaining the risk register, defining Key Risk Indicators (KRIs), and monitoring mitigation plans
Coordinate independent external audits of IT General Controls (ITGC), preparing and validating evidence and monitoring the remediation of deficiencies
Respond to requests from regulatory agencies, granting authorities, oversight bodies, Brazil’s National Data Protection Authority (ANPD), internal audit, and customers
Ensure identity lifecycle processes and provisioning and deprovisioning rules are implemented on the IGA platform
Define and maintain Role-Based Access Control (RBAC) models and govern service and privileged accounts
Lead periodic access recertification campaigns
Plan and execute Information Security awareness programs, including training and phishing simulations
Assess the security posture of servers, systems, networks, and applications, and monitor vulnerability management
Define security requirements for new projects and suppliers
Support investigations into incidents, fraud, and malicious events
Produce Key Performance Indicators (KPIs), Key Risk Indicators (KRIs), and reports for management and committees
Provide technical guidance to employees and analysts and evaluate new tools and methodologies

Requirements

What you’ll need

Formação superior completa em Ciência da Computação, Sistemas de Informação, Segurança da Informação, Redes, Engenharia, Tecnologia da Informação ou áreas correlatas
Conhecimento sólido em ISO/IEC 27001/27002, NIST CSF e LGPD
Experiência com gestão de riscos de Segurança da Informação e elaboração de políticas, normas e procedimentos
Vivência em processos de gestão de identidades e acessos: ciclo de vida, perfis de acesso (RBAC), recertificação e segregação de funções (SoD)
Capacidade analítica, boa comunicação escrita e verbal, organização e facilidade para interagir com áreas técnicas, de negócio e auditores
Vivência com auditoria de ITGC e implantação de ISO 27001 / SGSI é um diferencial
Vivência em plataformas de IGA, IAM, PAM, GRC é um diferencial
Certificações como ISO/IEC 27001 são um diferencial

Benefits

Comp & perks

Health insurance for employees and eligible dependents
Dental insurance for employees and eligible dependents
Telemedicine service
Emotional wellness program with free psychological support
Free annual flu vaccination for employees
Health prevention and care programs, including support for employees with chronic conditions and encouragement of healthy habits
Access to a network of partner facilities, including gyms and studios (TotalPass)
Partner network offering discounts on products and services
Internal quality-of-life programs: Mente Leve, Convivendo, Enxuga, and Melhor Maternidade
Life insurance
Extended parental leave: 180 days of maternity leave and 20 days of paternity leave
Meal allowance
On-site cafeteria or meal voucher, depending on the operation
Special Christmas voucher
Transportation allowance or parking, according to internal policy and the job location
Market-competitive salary
Profit Sharing and Results (PLR)
Corporate University with learning pathways
Occasional mentoring programs
Benefits may vary by business unit, position, or employment arrangement, subject to eligibility criteria