FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in Information Security governance, risk management, and compliance, with a strong focus on developing security policies and managing supplier risks. Proficient in monitoring security metrics and fostering information security awareness across departments.
Highest-signal resume keywords
Information Security GovernanceCyber Risk ManagementISO 27001 CertificationBrazil’s General Data Protection Law (LGPD)Security Awareness Programs
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Information Security ExperienceGRC (Governance, Risk, Compliance)Security Policies DevelopmentBusiness Continuity PlansSecurity Metrics Monitoring
Soft Skills
Strong Verbal CommunicationStrong Written CommunicationCollaborative ApproachProactive MindsetOrganizational Skills
Certifications & Qualifications
ISO 27001 CertificationCRISC CertificationCISM CertificationCISSP CertificationDPO/EXIN Privacy & Data Protection Certification
Industry Keywords
Information SecurityData PrivacyInternal AuditsExternal AuditsSupplier Risk Management
About the role
Key responsibilities & impact- Support the advancement of Information Security governance maturity.
- Lead cyber risk management processes.
- Develop and review security policies, standards, and procedures.
- Support internal and external audits.
- Assess security risks associated with suppliers.
- Monitor security indicators and metrics.
- Support information security awareness initiatives.
- Serve as a liaison between Information Security and departments such as IT Operations, Compliance, and Audit.
Requirements
What you’ll need- Bachelor’s degree in Information Security, Computer Science, Engineering, Information Systems, or a related field.
- Intermediate English proficiency.
- ISO 27001 certification.
- Extensive Information Security experience, with a focus on GRC.
- Advanced knowledge of Brazil’s General Data Protection Law (LGPD) and data privacy.
- Experience managing information security risks and supplier risks.
- Experience with internal and external audits.
- Experience developing security awareness programs.
- Experience developing and implementing business continuity plans.
- Experience defining, monitoring, and reporting Information Security indicators and metrics.
- Analytical and structured mindset.
- Strong verbal and written communication skills.
- Ability to collaborate effectively with different areas of the company.
- Proactive and self-directed approach.
- Strong organizational and prioritization skills.
- Strategic risk perspective.
- Postgraduate degree or MBA in Information Security, Cyber Defense, Risk Management, or an equivalent field (preferred).
- CRISC, CISM, or CISSP certification (preferred).
- DPO/EXIN Privacy & Data Protection certification (preferred).
- EXIN ISFS (Information Security Foundation) certification or equivalent (preferred).
- Knowledge of project management (preferred).
Benefits
Comp & perks- Market-competitive benefits.
- Hybrid work model with 3 days onsite and 2 days remote.