Information Security Specialist - SSDLC III (Cybersecurity)

Location: Hybrid in Graças, Recife, Brazil

Salary: €16,000–€18,000 per year

Company

IT consulting partner providing specialized technology advisory services to clients in a fast-moving market.

What you will do

• Conduct security risk assessments and analysis using the Risk Management Framework.
• Implement and improve application security maturity and Secure Software Development Lifecycle processes.
• Define and maintain secure development policies, procedures, governance, templates, checklists, and guidelines.
• Integrate security requirements throughout the software development lifecycle, from project initiation to production.
• Prepare risk assessments, security documentation, reports, compliance recommendations, and audit-readiness materials.
• Deliver security training, workshops, and awareness sessions for developers, architects, project managers, and third parties.

Requirements

• 3+ years of relevant experience.
• Experience with the Risk Management Framework for security risk assessment and analysis.
• Experience with application security maturity and SSDLC implementation.
• Knowledge of NIST, ISO 27001, ISO 27005, and ISO 27034 standards and frameworks.
• Experience in security governance, compliance, corporate security practices, and process improvement.
• Ability to produce security documentation and provide guidance on SSDLC approvals and compliance requirements.

Culture & Benefits

• Referral bonus.
• Special discounts and flexible options.
• Annual training budget.
• Team-oriented culture within a growing international company.
• Challenging projects with opportunities to grow and learn.