Senior Information Security Administrator

Lanlink Informática Ltda.

. Develop, implement, and enhance information security policies, standards, procedures, and controls aligned with best practices and institutional requirements.

Posted 10/22/2026full-timeRemote • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Security, Risk Management, Incident Response, and Forensic Analysis, with a strong focus on developing and implementing security policies, procedures, and controls. Proficient in conducting audits, assessments, and simulations to enhance organizational security posture and ensure business continuity.

Highest-signal resume keywords

Information SecurityRisk ManagementIncident ResponseForensic AnalysisBusiness Continuity Planning

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Policy DevelopmentVulnerability ManagementLog AnalysisCyberattack SimulationDisaster Recovery PlanningSecurity AuditingThreat DetectionSecurity Control ImplementationIncident InvestigationTechnical Reporting

Soft Skills

CollaborationCommunicationAnalytical ThinkingProblem SolvingTechnical Guidance

Tools & Technologies

SIEMSOCCloud SecurityISO 27001/27002CIS ControlsSANSOWASPSecurity MetricsKPI MonitoringDigital Forensics Tools

Certifications & Qualifications

ITIL 4 FoundationECSACySA+ECIHCSIH

Industry Keywords

Information Security GovernanceComplianceCritical SystemsHigh-Availability EnvironmentsOperational ContinuityShadow ITRisk Treatment PlansCrisis CommunicationIncident Response ProceduresOperational Failures

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Develop, implement, and enhance information security policies, standards, procedures, and controls aligned with best practices and institutional requirements.
Define and apply hardening policies for operating systems, servers, applications, databases, network devices, and other technology assets.
Propose continuous improvements to operational processes related to information security, risk management, and corporate asset protection.
Monitor the technology environment to identify emerging threats, vulnerabilities, and suspicious behavior, proposing and implementing mitigation measures.
Conduct detailed analyses of logs, events, and security indicators to identify incidents, anomalies, and potential compromises.
Conduct internal information security audits, assessing the effectiveness of implemented controls and proposing improvements.
Perform periodic assessments of security maturity and posture, identifying gaps and opportunities to enhance adopted processes and technologies.
Support the preparation, review, and updating of information security standards, procedures, and policies.
Prepare technical and executive reports related to incidents, risks, vulnerabilities, compliance, and security control performance.
Investigate information security incidents, identifying root causes, impacts, exploited vulnerabilities, and corrective measures to prevent recurrence.
Conduct digital forensic analyses of critical incidents, identifying attack vectors, technical evidence, chains of events, and impacts on the corporate environment.
Develop and execute security incident response plans, including containment, eradication, recovery, and lessons learned activities.
Plan, coordinate, and execute cyberattack simulation exercises, including advanced scenarios such as APTs, ransomware, and distributed attacks.
Assess and mitigate risks related to Shadow IT, identifying unauthorized assets, services, and applications used in the corporate environment.
Assess, validate, and recommend new information security technologies, solutions, and tools, considering technical requirements, risks, and benefits.
Work collaboratively with infrastructure, development, and operations teams to integrate security requirements and controls into corporate processes and systems.
Support the implementation of security practices in applications, services, architectures, and secure development processes.
Conduct assessments and audits based on ISO 27001/27002, CIS Controls, SANS, OWASP, and CNJ regulations.
Define, monitor, and analyze information security indicators, metrics, and KPIs.
Participate in technology and information security risk management, proposing treatment and mitigation plans.
Develop disaster recovery and business continuity strategies for critical systems, applications, and services.
Define, document, and test procedures for restoring technology environments after incidents, operational failures, or disasters.
Identify and classify critical systems, defining RTOs and RPOs.
Plan, implement, and validate operational continuity strategies.
Conduct periodic contingency, disaster recovery, and business continuity exercises and tests.
Develop action plans for contingency scenarios involving infrastructure failures, cyberattacks, service unavailability, and natural disasters.
Test and validate redundant environments, contingency servers, backups, and alternative communication and operating mechanisms.
Define the roles, responsibilities, and operating procedures of teams involved in incident response, contingency, and operational continuity.
Structure and maintain internal and external communication flows for crisis situations.
Consolidate information from service requests, incidents, vulnerabilities, and information security-related demands.
Provide technical support and specialized guidance to security, infrastructure, development, and governance teams.
Serve as a technical reference in information security, risk management, business continuity, and disaster recovery.
Perform other activities related to information security, digital asset protection, and ICT service continuity management.

Requirements

What you’ll need

Bachelor’s degree in Information Technology or a related field.
At least five (5) years of experience in the stated specialty, in critical, high-availability corporate environments, demonstrated through employment records or a statement from a public or private institution.
ITIL 4 training with a minimum workload of twelve (12) hours.
Official ITIL 4 Foundation certification or higher.
One of the following certifications: ECSA (EC-Council Certified Security Analyst), CySA+ (CompTIA Cybersecurity Analyst), ECIH (EC-Council Certified Incident Handler), or CSIH (Certified Specialist Incident Handler).
Solid experience in Information Security, Risk Management, Incident Response, Forensic Analysis, Security Governance, Business Continuity (BCP), Disaster Recovery (DR), Vulnerability Management, and Compliance.
Knowledge of ISO 27001/27002, CIS Controls, SANS, OWASP, SIEM, SOC, Cloud Security, log analysis, security indicators, and CNJ regulations will be considered an advantage.

Benefits

Comp & perks

Hapvida, Bradesco, or Unimed health insurance (available according to region)
Hapvida Odonto or Bradesco Dental insurance
Meal or food allowance
Life insurance fully funded by Lanlink
Transportation allowance
Gympass
Auster
Pharmacy benefit
Partner college and university program
Corporate Education Platform
Welcome-to-the-world baby kit
Moodar Platform