FBS Information Security Specialist

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an FBS Information Security Specialist based in Brazil. As an Information Security Specialist, you will play a key role in protecting enterprise systems, networks, applications, and sensitive data against evolving cybersecurity threats. You will independently assess complex security risks, conduct vulnerability assessments, and develop strategies that strengthen information security across a global business environment. Working closely with IT teams, business stakeholders, and technology leaders, you will ensure that security controls align with operational needs and regulatory requirements. You will also contribute to incident response, security architecture reviews, audit activities, and the continuous improvement of cybersecurity policies and processes. This role offers the opportunity to influence security decisions, lead cross-functional initiatives, and provide expert guidance on complex technical challenges. Join a diverse, international team where your expertise will help safeguard critical information assets and strengthen organizational resilience.

Cybersecurity Risk Assessment: Identify, assess, document, and communicate data security and privacy risks, recommending appropriate controls and countermeasures to protect enterprise information assets. Threat Analysis and Risk Mitigation: Proactively identify and mitigate moderate to major cybersecurity risks, analyze threat intelligence, and support the development of effective cyber defense strategies across the organization. Security Assessments and Testing: Conduct third-party security risk assessments, project security reviews, business risk assessments, and security testing for existing and proposed systems. Vulnerability and Technical Risk Management: Perform technical and nontechnical assessments across applications, networks, infrastructure, and local and global computing environments to identify weaknesses and recommend remediation measures. Change and Project Security Reviews: Evaluate security implications when applications or systems undergo significant changes, ensuring that potential risks are identified and addressed before implementation. Security Controls and Architecture: Define and integrate appropriate security controls into business and technology processes, participate in architectural discussions, and recommend solutions that balance protection, usability, and delivery timelines. Regulatory Compliance: Develop and maintain processes that support compliance with applicable legal, regulatory, and internal information security requirements. Cybersecurity Incident Management: Lead improvements in the detection, investigation, and response to cybersecurity incidents, overseeing appropriate preventive, detective, and corrective measures when threats are identified. Security Configuration and Compliance Monitoring: Review and approve advanced security configurations, investigate unusual compliance patterns, and evaluate their impact on enterprise risk and the effectiveness of security programs. Audit and Remediation Management: Participate in cybersecurity audits, track findings and recommendations, coordinate remediation activities, and ensure assigned audit actions and regulatory requests are addressed accurately and within established deadlines. Security Policy Development: Create, review, and update information security policies, procedures, standards, and guidelines to reflect evolving threats, business requirements, and compliance obligations. Stakeholder Relationship Management: Build effective working relationships with local and global business leaders, IT teams, and senior stakeholders to promote security awareness and support informed decision-making. Cross-Functional Project Leadership: Lead initiatives involving multidisciplinary and geographically distributed teams, influencing stakeholders to develop innovative solutions to complex security challenges. Technical Security Advisory: Serve as a subject matter expert across key technology platforms, providing intermediate to advanced security guidance and acting as a primary point of contact for IT teams seeking security expertise. Security Awareness and Advocacy: Promote the value of information security throughout the organization and encourage the adoption of secure practices across business and technology operations. Requirements Relevant Professional Experience: Demonstrated experience in information security, cybersecurity, IT risk management, or a related technical field, including the ability to independently manage moderately complex to advanced security assessments. Cybersecurity Risk Management: Strong knowledge of security risk assessment methodologies, threat analysis, vulnerability management, risk mitigation strategies, and security control evaluation. Technical Security Expertise: Experience assessing enterprise applications, networks, infrastructure, computing environments, and technology platforms to identify vulnerabilities and recommend effective safeguards. Information Security and Data Privacy: Solid understanding of data protection principles, confidentiality, integrity, availability, and the controls required to safeguard sensitive information. Security Testing and Assessments: Practical experience conducting security testing, third-party risk assessments, project security reviews, business risk assessments, and technical or nontechnical vulnerability assessments. Incident Response: Knowledge of cybersecurity incident detection, investigation, response, remediation, and continuous improvement of security operations. Security Architecture and Configuration: Ability to evaluate security configurations, contribute to architecture reviews, integrate security controls into technology solutions, and provide expert recommendations for complex systems. Regulatory Compliance and Auditing: Familiarity with information security regulations, internal control frameworks, audit processes, evidence collection, remediation tracking, and regulatory response requirements. Security Governance and Documentation: Experience developing or maintaining security policies, procedures, standards, guidelines, and risk documentation. Analytical and Problem-Solving Skills: Strong critical thinking and investigative abilities, with the capacity to interpret complex or ambiguous security findings and translate them into practical recommendations. Communication and Stakeholder Management: Excellent communication and relationship-building skills, with the ability to explain technical risks clearly, influence decision-makers, and collaborate effectively with technical and nontechnical audiences. Project Leadership: Ability to coordinate cross-functional initiatives, manage competing priorities, and work effectively with local and international teams. Autonomy and Accountability: A proactive, detail-oriented approach, with the confidence to make informed decisions, manage assigned responsibilities independently, and deliver results within established timelines. Continuous Learning: Commitment to staying informed about evolving cybersecurity threats, security technologies, industry best practices, and emerging compliance requirements. Language Skills: Professional English communication skills are beneficial for collaboration with international teams and stakeholders. Benefits Competitive Compensation: Attractive salary package based on the role and experience. Performance-Based Bonuses: Additional compensation opportunities linked to performance. Comprehensive Benefits Package: Access to a range of employee benefits. Private Health Insurance: Healthcare coverage as part of the benefits package. Paid Time Off: Paid leave to support personal well-being and work-life balance. Flexible Work Arrangements: Remote and/or office-based working options, depending on applicable arrangements. Training and Development: Opportunities to expand your technical expertise through professional learning initiatives and development programs in partnership with recognized organizations. Global and Multicultural Environment: Collaborate with diverse teams and experienced professionals in an international workplace. Career Development Opportunities: Build your expertise in enterprise cybersecurity, information security governance, risk management, and technology protection. Established Professional Environment: Work within a globally recognized organization with a strong market presence and experienced leadership. Local Payroll and Benefits Administration: Employment administration is supported through a local Employer of Record arrangement.