Senior Information Security Analyst

Scania Group

. Conduct regular risk assessments of internal environments and suppliers.

Posted 9/18/2026full-timeSão Bernardo do Campo • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Security risk assessment and management, compliance with ISO/IEC 27001 and NIST frameworks, and the ability to effectively communicate technical concepts to diverse audiences. Proven experience in security operations, incident response, and vulnerability management, with a commitment to continuous improvement and collaboration across teams.

Highest-signal resume keywords

Information Security Risk AssessmentISO/IEC 27001 ComplianceNIST Cybersecurity FrameworkVulnerability Management ToolsSecurity Incident Response

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentVulnerability ManagementSecurity OperationsSecurity ArchitectureIncident InvestigationCompliance AssessmentSecurity Policy DevelopmentImpact AssessmentMitigation PlanningSecurity Awareness Training

Soft Skills

Clear CommunicationCollaborationFlexibilityAnalytical ThinkingProblem Solving

Tools & Technologies

SIEMEDR/XDRCloud Security (Azure, AWS, GCP)CIS ControlsSecurity Guidelines Integration

Certifications & Qualifications

Security+ISO 27001CISSPCISM

Industry Keywords

Information SecurityCompliance StandardsThird-Party Risk ManagementIndustrial SecurityOT Security

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Conduct regular risk assessments of internal environments and suppliers.
Support the analysis and handling of escalated security events and alerts.
Contribute to investigations, impact assessments, and the definition of mitigation actions.
Support compliance assessments and initiatives related to ISO/IEC 27001, NIST, and other applicable frameworks and requirements.
Support vulnerability management, including identification, prioritization, remediation tracking, and assessment of associated risks.
Identify opportunities and propose continuous improvements to Information Security processes and controls.
Provide support by integrating security guidelines with the needs of applications, infrastructure, and business functions.
Create and track mitigation plans to reduce identified risks.
Monitor and analyze security system alerts, antivirus alerts, security bulletins, and security logs on a daily basis.
Handle and support security incident cases, conduct IT security investigations, document findings, and implement preventive measures.
Create detailed reports on the state of Information Security and present improvement recommendations.

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Information Systems, Information Security, or a related field.
Advanced to fluent English, with the ability to participate in meetings.
At least 5 years of experience in Information Security.
Experience in security consulting, security operations, and/or security architecture.
Experience with Information Security risk assessment and management.
Knowledge of ISO/IEC 27001 and the NIST Cybersecurity Framework.
Preferred knowledge: CIS Controls; Cloud Security (Azure, AWS, and/or GCP); SIEM, EDR/XDR, and vulnerability management tools; security in industrial/OT environments; third-party and supplier risk management.
Information Security certifications and/or training, such as Security+, ISO 27001, CISSP, CISM, or equivalent, are preferred.
Ability to explain technical concepts clearly to non-technical audiences.
Ability to work with other teams and stakeholders.
Flexibility to adapt to new threats and technologies.
Ability to analyze security issues and develop innovative solutions.
Commitment to maintaining the confidentiality of sensitive information.
Ability to assess the compliance of applications and suppliers.
Ability to identify and mitigate security vulnerabilities and risks.
Ability to conduct Information Security awareness training.
Knowledge of and commitment to compliance with local laws and security standards.
Ability to create, maintain, and update security policies and procedures.
Ability to lead risk and security discussions with technical teams, suppliers, and stakeholders.

Benefits

Comp & perks

New Baby Gift: A special gift card to help with the costs associated with the arrival of a baby, also available for adoptions.
Family Program: Comprehensive support during pregnancy, including a maternity kit and assistance for various family structures and adoption processes.
Extended Maternity Leave
Extended Paternity Leave
Legal Assistance
Daycare or Nanny Allowance for single mothers or fathers with sole legal custody
Seed of Hope Program for parents of children with disabilities
Christmas Gift for employees’ children up to 12 years old
Wellhub (Gympass), providing access to gyms, physical activities, and nutrition, mental health, sleep, and financial management apps
Scania Club, featuring a gym, sports courts, swimming pool, kiosks, beauty center, and partnerships with language schools, colleges, and early childhood education providers
Recreational Activities for employees’ children during school holidays
Long-Service Recognition
Bradesco Medical Insurance
Bradesco Dental Insurance
Pharmacy Benefit with a 50% subsidy on medications
On-site Medical Clinic
Health Prevention and Promotion Programs
On-site Registry Office, Postal Services, and Administrative Services
Volkswagen Vehicle Discount
Partnership with Tokio Marine for auto and home insurance
Itaú Banking Branch
Life Insurance
Pension Plan with a guaranteed minimum benefit
On-site Restaurant
Food or Meal Allowance
Company Shuttle Transportation for commutes of up to 40 km
Parking
Bicycle Parking