Information Security Technician

At CONTISYSTEMS, we value people who are passionate about challenges, innovation, and results.
We are looking to strengthen our team with an Information Security Technician (SGSI).
Main responsibilities:
SGSI Management
Maintain and update ISMS documentation (policies, procedures, and records).
Manage the Statement of Applicability (SoA) and ISO * controls.
Conduct risk management processes and monitor remediation plans.
Prepare for and monitor internal and external audits.
Support management reviews by monitoring indicators and providing reports.
Evaluate suppliers and complete customer security questionnaires.
Support the management of security incidents and awareness-raising efforts.
Ensure compliance with legal and regulatory requirements (GDPR, NIS2, among others).
Consulting
Participate in maturity and compliance assessments.
Prepare compliance documentation for clients.
Support certification processes and the demonstration of compliance.
Desired profile:
Bachelor's degree in Computer Engineering, Information Security, Information Systems Management, or a related field.
Solid knowledge of ISO/IEC *:** and ISO/IEC *:.
Experience in information security risk management.
Knowledge of the GDPR and NIS 2.
Ability to prepare technical documentation and reports.
Advanced proficiency in Microsoft Word and Excel.
Good knowledge of Portuguese and English.
Organization, independence, attention to detail, and strong communication skills.
Willingness to travel occasionally
We value:
2 to 3 years of experience in information security, auditing, compliance, or consulting.
ISO *, ISO ***, CISM, CISA, or equivalent certifications.
We offer:
Base Salary + Meal Allowance;
Health Insurance;
Access to various benefits and partnerships;
Mental Health Without Limits — a platform offering free and unlimited consultations;
Opportunity to join a structured team at a leading company in the industry.
Join CONTISYSTEMS and help foster a culture of safety, innovation, and excellence.