FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Information Security Specialist
LM Soluções de Mobilidade. Conduct periodic cyber risk assessments to identify, evaluate, and prioritize risks that may impact the business.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in conducting cyber risk assessments, developing and monitoring Information Security controls, and ensuring compliance with regulatory requirements. Proficient in managing security governance in AWS Cloud environments and preparing executive reports on security initiatives.
Highest-signal resume keywords
Cyber Risk AssessmentInformation Security GovernanceAWS Cloud SecurityGovernance, Risk, And Compliance (GRC)Information Security Management System (ISMS)
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Risk AssessmentSecurity Control DevelopmentCompliance MonitoringKPI/KRI ManagementAudit SupportRisk Treatment PlanningPolicy DevelopmentThird-Party Risk MonitoringRegulatory ComplianceAction Plan Definition
Soft Skills
Analytical ThinkingCommunicationConsultative ApproachDecision-MakingCollaboration
Certifications & Qualifications
ISO 27001ISO 27005CISMCRISCCISSPSecurity+
Industry Keywords
Regulated EnvironmentsFinancial InstitutionsBACENLGPDNIST CSFCOBITRisk Management Frameworks
Tech Stack
Tools & technologiesAWSCloud
About the role
Key responsibilities & impact- Conduct periodic cyber risk assessments to identify, evaluate, and prioritize risks that may impact the business.
- Monitor the effectiveness of first-line Information Security controls, ensuring compliance with policies and regulatory requirements.
- Develop and track treatment plans for risks, vulnerabilities, and nonconformities.
- Develop, monitor, and report security indicators to management and executive committees.
- Independently challenge decisions, exceptions, and risk acceptances submitted by business and technology teams whenever required.
- Support internal and external audits and regulatory inspections by providing evidence and tracking corrective actions according to the audit schedule.
- Develop and review Information Security policies, standards, and procedures.
- Monitor risks associated with critical third parties and supplier assessment processes.
- Act as an internal consultant on strategic projects, assessing security risks and requirements from the early stages in on-premises or AWS Cloud environments.
- Monitor adherence to regulatory and corporate Information Security requirements, promoting continuous improvement of the control environment.
Requirements
What you’ll need- Bachelor’s degree in Information Technology, Information Security, Information Systems, Computer Science, Computer Engineering, or a related field.
- At least 5 years of experience in Information Security, with experience in Governance, Risk, and Compliance (GRC) or first- or second-line defense functions.
- Experience working in regulated environments subject to internal and external audits.
- Experience developing, maintaining, and monitoring Information Security controls.
- Experience conducting risk assessments, implementing risk treatments, and defining action plans.
- Experience in security governance for AWS Cloud environments.
- Experience managing indicators (KPIs/KRIs), preparing executive reports, and tracking security initiatives.
- Knowledge of working with business, technology, audit, compliance, legal, and supplier teams.
- Minimum B2-level English proficiency with conversational ability.
- Information Security Management System (ISMS).
- Preferred: ISO 27001, ISO 27005, CISM, CRISC, CISSP, Security+, or similar certifications.
- Preferred: experience in financial institutions or companies regulated by BACEN (the Central Bank of Brazil).
- Preferred: knowledge of Brazil’s LGPD, NIST CSF, COBIT, and risk management frameworks.
Benefits
Comp & perks- No additional benefits or compensation are explicitly stated in the posting.