Process Analyst | Senior IT Governance (Audit)

We are looking for a Senior Process / IT Governance Analyst to act as a technical reference in the implementation, support, and evolution of IT Governance and Information Security practices, ensuring controls, indicators, evidence, and compliance with internal, regulatory, and audit requirements.

Responsibilities:

• Maintain and evolve the Information Security Management System (ISMS), ensuring adherence to ISO 27001 and internal policies.
• Conduct risk, control, and compliance assessments, proposing corrective, preventive, and continuous improvement actions.
• Consolidate, validate, and manage evidence for internal and external audits and certifications.
• Monitor indicators, risk treatment plans, audit actions, and improvement plans.
• Coordinate the governance of the Change Advisory Board, ensuring auditable records, analyses, approvals, communication, and evidence.
• Draft, review, and maintain policies, standards, procedures, matrices, and other IT Governance and Information Security documents.
• Evaluate risks related to critical changes, vendors, and IT processes.
• Act as a technical reference, guiding analysts and involved departments in governance, security, and compliance practices.
• Interact with leadership, technical teams, business units, auditors, and vendors.

Requirements:

• Bachelor's degree in Information Technology, Information Systems, Computer Science, Business Administration, Engineering, Law, or related fields.
• Solid experience in IT Governance, Information Security, internal controls, risk management, audits, document management, and indicators.
• Knowledge of IT Governance, ISMS, ISO 27001/27002, risk management, and controls.
  Experience drafting and maintaining policies, standards, and procedures.
• Knowledge of change, vendor, and contract management.
• Knowledge of LGPD and compliance requirements.
• Familiarity with BIA, SoA, SWOT, Kanban/Agile, ITIL, and COBIT.
• Knowledge of Microsoft 365, SharePoint, advanced Excel, Power BI, or equivalent tools.
• Familiarity with ITSM/GRC tools and document management.
• Technical/intermediate English for reading standards, contracts, evidence, and technical documentation.

Nice-to-haves:

• Postgraduate degree or specialization in IT Governance, Information Security, GRC, Auditing, Risk Management, or Compliance.
• Experience with ISO 27001/27002 in regulated corporate environments.
• Certifications or specializations in ISO 27001, ISO 27002, ITIL Foundation, COBIT, risk management, auditing, LGPD, or compliance.

Employment model:

• Work model: Hybrid 2 days a week in Faria Lima – São Paulo.

Benefits:

• Training and courses in market data technologies.
• Certification allowance (100% reimbursement).
• Learning paths in data and cloud technologies.
• Partnerships with higher education institutions.
• TotalPass.
• Salary negotiable and competitive with the market.

We are ATRA

ATRA is a Data specialist and official partner of major technology companies: Google, Denodo, Databricks, Informatica, Microsoft, AWS, Atlan, BigID, and IBM. We are certified as one of the best companies to work for in Brazil. We help companies innovate and transform their data into strategic assets.

We are passionate about data! Interested?