Information Security Analyst (Mid-Level) – Governance

Unimed do Brasil

. Develop and implement information security policies, procedures, and awareness programs .

Posted 9/29/2026full-timeSão Paulo • BrazilMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and implementing information security policies and procedures, with a strong focus on compliance and risk mitigation. Proficient in conducting vulnerability assessments and managing security incidents while fostering a culture of information security across the organization.

Highest-signal resume keywords

Information Security ManagementIncident ManagementVulnerability AssessmentISO 27001 CertificationKnowledge of LGPD

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security PoliciesRisk MitigationSecurity AuditingIT InfrastructureNetwork SecurityOperating Systems KnowledgeApplication SecuritySecurity Controls ImplementationCompliance StandardsData Protection Law

Soft Skills

Strong Communication SkillsEffective Time-ManagementTeam CollaborationAnalytical SkillsProblem-Solving

Certifications & Qualifications

ISO 27001 Certification

Industry Keywords

COBITPCI-SSCGDPRNISTBrazil’s General Data Protection Law

About the role

Key responsibilities & impact

Develop and implement information security policies, procedures, and awareness programs
Collaborate in identifying and responding to security incidents
Support departments in adopting secure practices, mitigating risks, and protecting against internal and external threats
Work with cross-functional teams to promote a culture of information security
Provide specialized guidance and technical support
Prepare, review, and maintain information security policies, procedures, and guidelines
Implement and audit security processes, ensuring effectiveness and compliance
Develop and deliver awareness programs for all levels of the organization
Conduct vulnerability assessments and manage information security incidents
Support business units and technical teams in implementing and managing security controls
Act as a champion for the security culture
Recommend improvements to information security processes, policies, and procedures

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Information Technology, or a related field
Experience in IT infrastructure, including knowledge of networks, operating systems, and applications
Experience in Information Security
Knowledge of Brazil’s General Data Protection Law (LGPD)
Knowledge of incident management, including workflows and response procedures
Understanding of workflows and processes
Strong communication skills
Effective time-management skills
Ability to work effectively in a team
Ability to analyze issues, identify inefficiencies, and propose improvements
ISO 27001 certification is a plus
Experience with projects involving ISO 27000, COBIT, PCI-SSC, GDPR, LGPD, and NIST is a plus

Benefits

Comp & perks

Health insurance
Dental insurance
Pharmacy benefit
Fitness center partnerships
Flu vaccination campaign
Fresh Fruit Day
New-baby welcome kit
Employee engagement initiatives
Birthday-month day off
Gift card
Employee psychological support program
Rest and relaxation area
Meal allowance
Food allowance
Flexible working hours
Transportation allowance or parking
Payroll-deducted loan
Bank partnership
Partnership with a provider offering support for child nutrition
Private pension plan
Life insurance