Information Security Specialist – SoD Governance, Segregation of Duties
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Especialista em segurança da informação governando SoD, IAM e RBAC na Avvale. Mitigação de riscos de acesso e conformidade para soluções empresariais inovadoras e sustentáveis.
Responsibilities:
- Act as the technical and functional reference for Segregation of Duties (SoD) governance, IAM, RBAC and access risk mitigation
- Manage and maintain the Segregation of Duties (SoD) Matrix
- Identify, analyze, classify and remediate SoD conflicts in corporate systems
- Define and implement compensating controls
- Conduct periodic assessments of critical, privileged and conflicting access risks
- Work with business areas, Audit, Compliance and Internal Controls to remediate SoD conflicts
- Participate in defining and evolving RBAC models
- Ensure access alignment with the principle of least privilege
- Support access provisioning, review, recertification and revocation processes
- Monitor privileged access and critical accounts
- Support automation and continuous improvement of IAM and PAM processes
- Ensure compliance with internal policies, regulatory requirements and corporate standards
- Support audits related to access controls
- Prepare metrics, executive reports and SoD risk dashboards
- Monitor action plans to mitigate deviations
- Assess impacts of new projects, systems and organizational changes on SoD risks
- Define and review access governance processes
- Participate in the approval/validation of new profiles and roles for critical systems
- Support implementation of GRC, IAM and PAM tools
- Promote training and awareness on access risks and SoD for business and IT teams
Requirements:
- Bachelor's degree in Information Security, Computer Science, Information Systems, Computer Engineering, Business Administration, Accounting or related fields
- Experience and knowledge in Segregation of Duties (SoD) governance
- Knowledge of Identity and Access Management (IAM)
- Knowledge of Role-Based Access Control (RBAC)
- Knowledge of Privileged Access Management (PAM)
- Knowledge of access risk, regulatory compliance and internal policies
- Ability to manage and maintain the SoD matrix
- Ability to identify, analyze, classify and remediate SoD conflicts
- Ability to define and implement compensating controls
- Ability to perform risk assessments for critical, privileged and conflicting access
- Ability to support access provisioning, review, recertification and revocation
- Ability to prepare metrics, executive reports and SoD risk dashboards
- Ability to support internal and external audits
- Ability to support implementation of GRC, IAM and PAM tools
- Availability to work as a contractor (PJ)
Benefits:
- iFood multi-benefit card
- 10 paid working days of leave
- Paid maternity and paternity leave
- Employee referral program with financial bonus
- Access to Wellhub/TotalPass and OnHappy
- Equipment provided by Avvale
- Amil 400 health plan
- Dental plan
- Opportunity for growth in a young, dynamic team
- Smart work policies to support work–life balance
- Opportunity to develop your career in a meritocratic environment
- Opportunity to work with and interact with international partners
- Positive and trustworthy work environment
- Diversity and inclusion
Similar Jobs
Principal Security Engineer
Principal Security Engineer governing Fortive’s multi-cloud, AI, GitHub, and security architecture. Advising executives and leading enterprise technology strategy, governance, security, and modernization.
Security Engineering Lead
Security Engineering Lead building Product Security for Attio’s AI-native CRM. Securing customer data, leading incident response, and hiring the security team.
Security Engineering Lead
Security Engineering Lead building Attio’s Product Security function for its AI-native CRM platform. Leading application security, incident response, and security team growth.
Senior Cloud Security Engineer
Senior Cloud Security Engineer securing Omilia’s AWS conversational AI platform. Automating Terraform, GitOps, CI/CD, and cloud compliance across distributed engineering teams.
Consultor Sailpoint ISC – Identity Security Cloud
Consultor SailPoint ISC en Devoteam, consultora europea de estrategia digital y ciberseguridad. Despliegue, integración y evolución de soluciones Cyber IAM para clientes.
Senior Security Engineer – AI Focus
Senior Security Engineer securing AI/ML systems for Euna Solutions, a cloud-based public-sector software provider. Driving AI security, automation, governance, and compliance across the development lifecycle.
Senior Security Engineer – AI Focus
Senior Security Engineer securing AI/ML systems at Euna Solutions, a cloud software provider for public-sector organizations. Driving AI security automation, governance, compliance, and secure development practices.
R&D Cybersecurity Engineer
Sentar cybersecurity engineer supporting DLA research and development efforts. Administering Okta infrastructure, operational systems, networking, automation, maintenance, and user support.
Visiting Professor, Cybersecurity
Online cybersecurity professor teaching undergraduate and graduate students at DeVry University. Developing course materials, assessing learning, and integrating responsible AI and applied security practices.
Principal Information Security Engineer
Principal Information Security Engineer securing ASRC Federal’s DSOP platform for the U.S. Department of Defense. Assessing Kubernetes and containers, managing vulnerabilities, and integrating zero-trust controls across DevSecOps environments.
Cyber Security Engineer
Cyber Security Engineer building automated security capabilities for Interact’s enterprise intranet platform. Improving Splunk, cloud controls, and incident response through engineering and automation.
IT Cybersecurity Auditor
Cybersecurity Auditor conducting risk-based IT, security, and compliance audits for DiXiO, a global SWIFT financial messaging expert network. Assessing controls and reporting findings to clients.
IT Security Engineer
IT Security Engineer safeguarding sensitive healthcare information for Legacy Community Health, a Southeast Texas federally qualified health center. Monitoring threats, assessing risks, and strengthening Microsoft cloud and infrastructure security.
Security Advisor, Falcon Complete
Security Advisor guiding CrowdStrike Falcon Complete customers toward stronger cybersecurity postures. Assessing environments, recommending remediation, and coordinating technical issue resolution.
Senior Security Engineer
Senior Security Engineer securing AxisCare’s SaaS platform for home care agencies. Owning SOC 2 compliance, AWS infrastructure security, AI risk controls, and incident response.
Senior Security Specialist
Senior Security Specialist supporting SAIC’s defense and hypersonics mission. Developing security programs, classification guidance, training, access controls, and incident response.
Senior Security Engineer – Red Team
Senior Red Team Engineer securing Coupa’s AI-powered spend management platform. Testing web, mobile, API, and AI/LLM systems while developing autonomous security-testing agents.
CyberSecurity Consultant – Contractor
Cybersecurity Consultant securing Microsoft Cloud infrastructure and applications for Avertium clients. Leading security architecture, integration, controls, and cybersecurity projects remotely in the United States.
CyberSecurity Consultant
Cybersecurity Consultant securing Microsoft Cloud infrastructure and applications for Avertium clients. Leading architecture, integration, security controls, and cybersecurity strategy projects.
Cloud Security, IAM Architect
Microsoft Cloud Security/IAM Architect securing Dataverse and Dynamics environments for federal IT infrastructure. Designing identity controls, sensitive-data protections, auditing, monitoring, and incident-response documentation.