GRC Security Analyst — Governance, Risk & Compliance (Mid-level)

Posted 45ds ago

Employment Information

Industry

Education

Salary

Experience

Job Type

Location

Job expired or something wrong with this job?

Analyst managing information security risks at Zup Innovation. Collaborating on governance and applying compliance frameworks in a remote work model.

Manage information security risks by identifying and assessing threats in processes and projects;
Implement and monitor security controls following compliance frameworks (CIS, ISO 27001, SOC, PCI, NIST);
Support the creation, review, and dissemination of information security governance policies and processes;
Conduct third‑party risk assessments (TPRM) and recommend remediation plans;
Monitor cyber risk indicators relevant to the business and produce managerial and technical reports;
Assist in business continuity management (BCM) in the context of information security;
Collaborate with internal teams on projects to ensure security requirements are addressed from the start of development;
Use tools and repositories to document activities, maintain up‑to‑date records, and prioritize actions.

Advanced Excel for data analysis and tracking indicators;
Hands‑on experience with ServiceNow and OneTrust for risk, compliance, and incident management;
Basic SQL skills for querying and analyzing security‑relevant data sources;
Experience with Power BI;
Experience using GitHub Projects as a tool for recording and tracking technical requests;
Fundamental knowledge of AWS and Azure cloud environments, especially in a compliance context;
Familiarity with CIS, ISO 27001, and NIST frameworks applied to information security;
Ability to create or interpret basic scripts for automation or analysis in security projects;
Quick learner with the ability to absorb new knowledge rapidly;
Responsible and sustainable use of AI agents;