Эта вакансия в архиве

Посмотреть похожие вакансии ↓
Company hidden
3 месяца назад

Senior GRC Analyst (Business Resilience)

Тип работы
fulltime
Грейд
senior
Английский
c1

Описание вакансии

Текст:
/
TL;DR
Senior GRC Analyst (Business Resilience) (GRC/BCM/DR): Developing and improving governance, risk, compliance, and operational resilience programs for an IoT-enabled industrial technology platform with an accent on business continuity, disaster recovery, incident response, and regulatory alignment. Focus on conducting business impact analyses, defining RTO/RPO objectives, designing recovery strategies, and testing organizational resilience through tabletop and technical recovery exercises.

Company

hirify.global combines industrial IoT hardware and software to help frontline maintenance teams improve operational efficiency and decision-making.

What you will do

  • Lead operational resilience, business continuity, disaster recovery, incident response, and technology risk management activities.
  • Conduct business impact analyses, define RTO/RPO objectives, develop disruption scenarios, and establish recovery strategies for critical services.
  • Maintain BCM, DR, and IR policies, standards, procedures, recovery plans, and playbooks.
  • Plan and facilitate tabletop exercises, recovery tests, failover exercises, and backup validation while tracking corrective actions.
  • Manage risk registers, controls, mitigation plans, audit evidence, and remediation activities in collaboration with control owners.
  • Partner with Engineering, Infrastructure, Product, Security, and business teams on compliance, resilience, audits, and customer security due diligence.

Requirements

  • Background in IT, information security, GRC, internal audit, compliance, or quality management.
  • Experience implementing BCM and DR programs based on ISO 22301 and ISO 22313.
  • Experience with BIA, RTO/RPO definition, recovery strategies, contingency planning, disruption scenarios, and resilience testing.
  • Experience developing policies, procedures, playbooks, controls, and remediation plans for BCM, DR, and IR.
  • Knowledge of ISO 27001, ISO 27002, ISO 27005, NIST, LGPD, and GDPR requirements.
  • Advanced English proficiency required.

Nice to have

  • Experience with compliance automation, GRC platforms, and BCM tools.
  • Experience working with multiple security frameworks and regulatory environments.
  • Experience managing remediation initiatives in Jira, Linear, Monday, or similar platforms.
  • Security certifications or experience using automation and AI to improve GRC operations.

Culture & Benefits

  • Competitive salary and stock options.
  • 30 days of paid annual leave.
  • Education and courses stipend.
  • Health plan with national coverage and no coparticipation, plus dental insurance.
  • R$1,035 monthly meal allowance and Wellhub access.
  • R$300 monthly sports incentive and an opportunity to earn a trip anywhere in the world every four years.