Junior GRC Consultant

Job Description:

We are looking for a Junior GRC Consultant dedicated and proactive to join our team, with an initial focus on projects related to maintaining ISO 27001 certification. This professional will have the opportunity to learn and support in identifying and correcting attention points raised by internal audits, process mapping, Business Impact Analyses (BIAs), and data privacy, contributing to ensuring that our clients maintain their systems secure and compliant with international standards.

Main Responsibilities

• Supporting the Correction of Attention Points: Assist in evaluating and correcting attention points identified by internal audits, ensuring adherence to ISO 27001 requirements under supervision.
• Support for Implementing Security Controls: Collaborate on developing and implementing information security controls aligned with international standards and market best practices.
• Assistance in Risk Management and Continuity: Support basic risk assessments and proposing mitigation measures, focusing on preventing security incidents, and collaborate in conducting Business Impact Analyses (BIAs).
• Mapping and Analyzing Processes: Contribute to mapping and documenting internal processes relevant for information security and compliance.
• Participation in Data Privacy Initiatives: Act in the data privacy stream, assisting in implementing and maintaining controls and data protection requirements.
• Documentation and Reports: Contribute to preparing and maintaining documentation for conformity and audit purposes, learning team standards.
• Participation in Consulting and Training: Participate and support the team in technical guidance and training activities for colleagues on GRC SI best practices.
• Mapping processes.
  

Culture and Values

We are looking for a professional with a strong desire to learn, who shares our commitment to security and compliance, and is proactive and solution-oriented. Our work environment is collaborative and offers an excellent scenario for continuous professional growth and development.