Especialista de GRC

Requisitos

• 6+ years of experience in Governance, Risk and Compliance or Information Security Auditing
• Proven experience in certification or audit projects under ISO 27001 and SOC 2
• Knowledge of PCI-DSS, LGPD and NIST CSF
• Experience in risk management (identification, assessment, treatment and monitoring)
• Experience with internal controls and effectiveness testing

Desejáveis

• Certifications such as ISO 27001 Lead Implementer/Auditor, CISA, CRISC, CCSP or similar
• Knowledge of risk management methodologies (ISO 31000, COSO ERM)
• Experience at cloud providers, data centers or SaaS companies that completed SOC 2 Type II or ISO 27001