Risk Management Professional

Risk Management Professional at Spassu in United States.

Role Summary

Category: Technology

Requirements

• Completed higher education in the area of Technology.
• Desirable Experience: Experience in an IT audit, enterprise risk management (ERM) role, or cyber risk management role.
• KnowledgeISO 31000; ISO 27005; IS Risk Management, privacy and data protection; CIS Control v8, Miter ATT&CK and NIST Cybersecurity Framework frameworks; Carrying out assessments; Risk management through specialized tools.

Benefits

• Health Plan
• Dental Plan
• Life Insurance
• Food or Meal Voucher
• Vale Transport
• WellHub Gympass
• Details
• Do you enjoy technology, innovation and have agility in your DNA?
• Then maybe you've just found your next challenge!
• At Spassu, we have an incredible project underway — and it is ready to welcome professionals with that extra something.
• If you are an IS Risk Management Professional, have a restless profile, enjoy learning and want to grow together with a company that values new ideas, come with us!
• Here, you will find space to expand your knowledge, apply your talent and be part of something truly meaningful, sign up and come and transform with Spassu!
• CVs will remain in the company's possession for the duration of the selection process and for an additional period of 6 months, for any future selection processes, in compliance with the General Data Protection Law.
• MAIN ACTIVITIES: Responsible for planning, managing and coordinating various cybersecurity risk management activities focused on identifying, assessing and mitigating risks to the organization.
• Ability to create corporate governance and information security plans;
• Ability to carry out business impact analysis;
• Ability to develop processes and monitor IS risk management indicators.