MAIN RESPONSIBILITIES

• Develop, implement, and maintain security strategies, policies, and procedures to protect the organization's data and IT assets.
• Ensure alignment of security initiatives with the overall business objectives and regulatory requirements.
• Lead the identification, assessment, and mitigation of security vulnerabilities within the organization's information systems.
• Perform regular vulnerability assessments and penetration testing to uncover security weaknesses.
• Perform regular risk assessments to evaluate the potential impact of security threats and determine appropriate risk management strategies.
• Lead and coordinate the response to security incidents, including breach detection, investigation, containment, eradication, and recovery.
• Conduct post-incident analysis and develop reports detailing the incident and preventive measures.
• Oversee the continuous monitoring of network traffic, system logs, and security alerts to detect and respond to security threats in real-time.
• Manage and optimize the deployment and configuration of security tools such as SASE, CASB, SIEM etc.
• Ensure compliance with relevant security standards and regulations (e.g. LGPD, GDPR, ISO 27001).
• Prepare for and lead security audits, including the development of audit plans and the coordination of audit activities with internal and external stakeholders.
• Develop and deliver security awareness programs and training sessions for employees, promoting best practices and reducing the risk of security breaches.
• Advise on security risks and recommend appropriate measures to mitigate those risks across the organization.
• Act as a key liaison between the IT department and other business units to ensure security measures are integrated into all areas of the organization.
• Work closely with the legal and compliance teams to ensure that security practices meet legal and regulatory requirements.
• Maintain detailed and up-to-date documentation of security policies, procedures, and incidents.
• Prepare and present comprehensive reports on security metrics, incidents, and compliance status to senior management and other stakeholders.
• Stay current with the latest security trends, threats, and technologies.
• Identify opportunities for improving security processes and implement best practices to enhance the organization’s security posture.

EXPERIENCE & QUALIFICATIONS REQUIRED

• Hands-on experience with infosec tools and platforms
• Demonstrated ability to develop and execute Infosec strategies
• Excellent leadership and team management skills, with a track record of building and leading high-performing teams.
• Strong analytical and problem-solving skills, with a keen attention to detail.
• Exceptional communication and stakeholder management abilities.