Software Engineer Specialist - IT Risk

Job Description

• Conducting technology risk assessments on systems, processes, and suppliers.
• Supporting the implementation of policies and controls related to PCI-DSS, ISO 27001, LGPD, and other regulatory standards.
• Participating in risk analysis throughout the SDLC, promoting Secure SDLC practices.
• Evaluating and monitoring business continuity plans, crisis management, and security incident responses.
• Generating executive and technical risk reports for stakeholders.
• Participating in internal and external audits.
• Collaborating on cybersecurity insurance strategies and mitigating emerging risks.
• Monitoring risk indicators and supporting the integration of SIEM, IAM, RPA, and automation tools.
• Developing and implementing robust security architectures.
• Conducting regular security audits and penetration tests.
• Providing security training and awareness for stakeholders.

• Strong skills in IT Risk Management, Information Security, Technical Audits, and Compliance.
• Experience with frameworks such as ISO 27001, NIST, SOC 2, PCI-DSS.
• Knowledge of secure architecture, IAM, cloud security, and automation with Python, RPA, or similar tools.
• Familiarity with TPRM processes and critical supplier analysis.
• Certifications in information security are highly desirable.
• Knowledge of cryptography, network security, identity and access management, and incident response.
• Proficiency in Python for scripting and automation.
• Experience with SIEM for log correlation and security events.
• Excellent communication and interpersonal skills.

• Opportunity to work with cutting-edge technology and innovation.
• A dynamic and challenging work environment.