Sr Information Security (SME)

Main activities and skills:
 Assess security gaps within the organization, in different technologies and business
contexts, enabling risk treatment and designing action plans as necessary;
 Develop and implement policies and procedures related to information security, physical
security, fraud prevention, and risk management;
 Support compliance with regulatory requirements related to security and privacy
providing visibility and technical guidance on strategies for compliance and possible
trade-offs based on risk;
 Collaborate with cross-functional teams to understand the business requirements, and
translate them into technical specifications;
 Define guidelines and best practices on business security matters that empower
Nubankers to perform their work efficiently and securely;
 Work in a multidisciplinary and global team, interacting with teams mainly in Brazil,
Mexico, and Colombia.
 Proven experience in designing and implementing security controls;
 Familiarity with different domains and concepts of cyber and business security;
 Strong inclination towards data-driven decision-making;
 Experience with large-scale distributed environments;
 Analysis of existing business processes and identify potential risks related to information
security;
 Experience with risk analysis techniques like risk identification, assessment and
prioritization and qualitative and quantitative risk assessment techniques is needed;
 Good understanding of cybersecurity principles, risk management frameworks (such as
NIST
 Cybersecurity Framework, NIST SP 800-30, FAIR, ISO 27001, ISO 27002, ISO 27005, ISO
31000 or COSO);
 Excellent communication and problem-solving skills are important to effectively assess
and
 communicate risks to internal stakeholders;
 Previous work experience in consulting or advisory roles is often preferred;
 Design, develop, and implement Information Security GRC domains and disciplines,
including TPRM, Risk Management, Compliance and Business Security assessments.

Aplicar-se a Vaga