Information Security Specialist / GRC Analyst

Role Summary

🔐 Join UEPM as an Information Security & GRC Analyst

At UEPM we continue to grow and are looking for the person to lead the Governance, Risk & Compliance (GRC) function within the company.

If you are passionate about information security, enjoy building processes from scratch and want to have a role with real impact in a global company, this challenge is for you.

Responsibilities

• ✨ +3 years of experience in Information Security, GRC or Compliance.
• ✨ Verifiable experience working with ISO 27001 (exclusive).
• ✨ Knowledge of frameworks such as ISO 27001/27002 and NIST CSF.
• ✨ Understanding of Cloud environments and risk management.
• ✨ Advanced English, both oral and written (exclusive).
• 💡 It will be a plus to have experience in SOC 2, GDPR, LGPD, HIPAA or tools such as Vanta, Drata or Sprinto.

Requirements

We are looking for professionals who

• 🔐 Have experience in Information Security, GRC or Compliance.
• 📋 Have participated in the implementation or maintenance of ISO 27001 for a complete cycle.
• 🌎 They feel comfortable interacting with international clients and participating in audits in English.
• 🚀 Enjoy working autonomously, leading end-to-end initiatives and collaborating with multidisciplinary teams.
• 🤝 Have excellent communication skills and can translate technical concepts to different audiences.
• 🚀 What will be your challenge?
• ✔ Lead and evolve the Information Security Management System (ISMS).
• ✔ Be the main point of contact in audits of clients and external organizations.
• ✔ Lead the ISO 27001 certification process, from the gap analysis to the certification audit.
• ✔ Manage security risks, policies, controls and documentation.
• ✔ Evaluate suppliers from the perspective of information security.
• ✔ Promote a culture of safety and awareness within the organization.

Benefits

• 🚀 The opportunity to build and lead the GRC function within the company.
• 🌎 A role with international exposure and direct contact with global clients.
• 📚 Comprehensively lead the ISO 27001 certification process.
• 🏡 100% remote modality, with autonomy and flexibility.
• 🤝 A collaborative environment where you can generate a real impact from day one.