Information Security and Governance Analyst, Mid-Level
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Analista de Governança e Segurança da Informação apoiando auditorias, riscos e controles na Monkey. Empresa de tecnologia financeira que simplifica transações entre grandes empresas e fornecedores.
Responsibilities:
- Lead and support internal and external audits
- Serve as a liaison between business, technology, and security teams
- Support the management of corporate, cybersecurity, and third-party risks
- Develop, review, and maintain policies, standards, and procedures
- Manage document governance and controls for the ISMS (Information Security Management System)
- Respond to customer assessments and compile compliance evidence
- Lead Information Security awareness initiatives
- Support business continuity and disaster recovery activities
- Support Monkey’s SecGov team in complying with security and governance best practices, maintaining controls, policies, and processes aligned with ISO 27001 and SOC 2
Requirements:
- Experience in Governance, Risk, and Compliance (GRC), Information Security, Corporate Risk, or Auditing
- Experience working in audited and certified environments
- Knowledge of ISO 27001, SOC 2, ISO 22301, NIST CSF, COBIT, or equivalent frameworks
- Experience with internal and external audits
- Knowledge of risk management, third-party risk, and compliance
- Strong technical writing skills for developing and maintaining governance documents and responding to assessments
- Intermediate or advanced English proficiency
- Previous experience in auditing (internal, external, or consulting), particularly process audits
- Technical background in areas such as infrastructure, cloud, development, or operations
- Certifications related to Information Security, Risk, or Auditing, such as ISO 27001 Lead Auditor/Implementer, CISA, or CRISC
Benefits:
- Meal and food allowance on a Flash card, with the flexibility to use it as you prefer
- Home office allowance to support your remote-work routine
- Medical and dental insurance fully covered by the company
- Life insurance for greater peace of mind
- Wellhub – access to gyms, studios, and wellness services throughout Brazil
- Monkey Academy – career development and acceleration programs
- Birthday day off – so you can enjoy your day however you prefer
- Partnership with Sesc for leisure, culture, and wellness
- Extended maternity and paternity leave, so you can enjoy this special time with peace of mind
- Childcare allowance to provide greater security and balance in your routine
Similar Jobs
Security Engineer IV
Security Engineer IV leading AI/LLM security, cloud controls, compliance, and incident investigations. Rackspace Technology operates enterprise AI infrastructure for regulated and mission-critical customers.
Regional Sales Director, Identity Security
Regional Sales Director leading Mid-Atlantic and TOLA sales teams for Cyera’s AI security platform. Driving territory growth, enterprise deals, coaching, and quota achievement.
Security Engineer
Security Engineer operating Firmable’s SOC 2 and ISO 27001 security controls. Managing AWS cloud security, vulnerabilities, access, monitoring, audits and incident response remotely.
AVP, Cyber Application Security Architect
Cyber application security architect securing SaaS, cloud infrastructure, and software development lifecycles. Driving secure-by-design reviews, DevSecOps, threat modeling, and AI/ML security guidance.
Senior Cybersecurity Disaster Recovery, Contingency Planning SME
Cybersecurity DRCP SME leading nationwide BIA, DRP, and contingency planning programs. Supporting government agencies in strengthening national security and improving public services.
Cloud Specialist – Security SSR
Cloud Security Specialist securing AWS infrastructure for major Latin American companies. Designing AWS governance, network protection, compliance, automation, and incident remediation.
Senior Cybersecurity Architect
Senior Cybersecurity Architect governing Zero Trust, AWS, DevSecOps, and AI security architecture. Reducing cyber risk across HomeServe’s home-services technology and integrations.
Senior Cybersecurity Engineer
Senior Cybersecurity Engineer securing HomeServe’s enterprise systems, infrastructure, and business operations. Leading risk assessments, security architecture, incident response, compliance, and cybersecurity innovation.
AWS Cloud Security Engineer
AWS Cloud Security Engineer securing Peraton’s FedRAMP-authorized AWS infrastructure. Implementing cloud controls, continuous compliance, and ATO support for national security missions.
Security Engineer – CrowdStrike Falcon
Senior CrowdStrike CNAPP engineer configuring cloud, Kubernetes, and container security for a cybersecurity consulting firm. Securing government and enterprise environments through hands-on Falcon implementation.
Technical Advisor II – Food Security, Livelihoods and Markets
Remote CRS technical advisor leading Sudan’s World Bank-funded Food and Nutrition Security Plan. Advising global food security, livelihoods, and market-based humanitarian programming.
Manager, Application Security, SOX
Application Security and SOX Manager securing Oracle Fusion, EPM, and OIC environments. Ensuring access governance, Segregation of Duties, and compliance for Paramount’s global media business.
Senior Manager, Application and Pipeline Security
Senior Manager leading Nielsen’s application and pipeline security for its media insights business. Driving AWS governance, AI-driven DevSecOps, automated remediation, and security engineering team performance.
Senior Security Engineer
Senior Security Engineer monitoring and responding to threats across Cision’s cloud, identity, endpoint, and Linux environments. Cision provides PR, marketing, and social media management technology.
Information Security Control Assurance Analyst
Information security analyst assuring controls, audits, and compliance for Southern New Hampshire University. Managing risk assessments, SSPs, POA&Ms, audits, and governance reporting remotely.
Security Engineer – Manager
Security Engineering Manager leading zero-trust, IAM, collaboration, and AI workspace security for Binance’s global blockchain ecosystem. Building secure platforms and leading distributed engineering teams.
Principal Security Engineer
Principal Security Engineer reviewing FedRAMP cloud architectures, authorization packages, and security controls. Advising government programs and Cloud Service Providers on NIST compliance and risk.
Senior Cybersecurity Risk & Resilience Consultant
Senior cybersecurity risk consultant assessing technology, cloud, and third-party risks. Strengthening risk frameworks and advising stakeholders on resilience, compliance, and remediation.
Senior Cybersecurity Governance Consultant
Senior Cybersecurity Governance Consultant strengthening an organization’s cybersecurity frameworks, policies, controls, and compliance. Managing governance reporting, exceptions, audits, and regulatory-readiness initiatives.
Cybersecurity Compliance, Technical Controls Consultant
Cybersecurity consultant assessing technical controls, cloud, infrastructure, and regulatory compliance. Managing audits, remediation, evidence, policies, and metrics for a two-year engagement.