Keyrus Brazil
AXA
SENIOR GOVERNANCE ANALYST
Job Description
Here at AXA you can be who you truly are. We believe we are much better together, and for this reason, we are always looking for the best talent. All candidates who meet the requirements will be considered for the position regardless of race, color, religion, gender, identity, sexual orientation, nationality, or age.
All of our opportunities are open to people with disabilities.
Who are we looking for?
We are looking for someone who always thinks about every project, process, or product from the customer's perspective, making things easier and simpler, even if it means challenging our status quo. We are looking for someone who makes quick decisions and who thinks, decides, and acts in a simple way; someone who values feedback and uses it to learn and develop. We are looking for someone who is ethical and keeps their promises. We are looking for someone who works well in a team, respecting differences, as we believe they are fundamental to our success, but who also dares to disagree and share their convictions.
Senior Governance Analyst
What are the main challenges?
Responsible for:
- Establishing and operationalizing strategic and technical processes for governance, monitoring, analysis, and mitigation of threats, vulnerabilities, and risks, ensuring the security, integrity, and continuity of the organization's IT assets.
- Leading the development and implementation of governance policies, controls, and processes aimed at identifying, assessing, and mitigating internal and external threats.
- Conducting risk assessments and prioritizing defense actions, aligning strategies with security standards and regulations.
- Conducting strategic defense plans, including incident response and vulnerability mitigation plans.
- Generating reports on risks, incidents, action plans, and maturity indicators.
- Promoting training, awareness, and alignment with internal stakeholders.
Main deliverables
- Security governance plan.
- Documented policies, procedures, and controls.
- Risk, incident, and improvement reports.
- Security maturity indicators.
Minimum requirements
What are the necessary prerequisites?
Education
- Bachelor's degree in fields such as Business Administration, Law, Computer Science, Engineering, Information Systems, or related areas.
- Intermediate English (reading)
Technical Skills
- In-depth knowledge of governance frameworks (ISO 27001, COBIT, COSO, ITIL).
- Risk management, auditing, and regulatory compliance.
- Knowledge of relevant legislation (LGPD, GDPR, SOX, etc.).
- Development of policies, internal controls, and action plans.
- Risk management and reporting tools (advanced Excel, GRC tools such as RSA Archer, JIRA, GRC, etc.).
Experience
- Seniority in GRC, auditing, compliance, or IT governance areas.
- Experience in leading teams or governance projects, preparing strategic reports, and building relationships with internal and external stakeholders.
Other Skills
- Analytical capacity, effective communication, leadership, and the ability to influence stakeholders at different hierarchical levels.
- Postgraduate degree or specializations in GRC, Risk Management, Compliance, Information Security, or Corporate Governance (desirable).
What do we offer?
- Hybrid work (2x per week)
- Flexible hours
- Meal voucher
- Food voucher
- Health insurance
- Dental insurance
- Life insurance
- Private pension plan
- Home Office allowance
- Maternity leave of 6 months
- Paternity leave of 60 days
- Daycare assistance
- Nanny assistance
- Special assistance for children with disabilities
- Travel insurance
- Gym partnership program
- Early Friday finish
- Birthday Day Off
- Personal support and social guidance program
- Partner discounts
- LinkedIn Learning
- Profit sharing (PLR)
If you identify with our values, come join our team!
We are waiting for you!
#VemPraAXA
By applying, you authorize AXA SEGUROS S/A, companies within the same Economic Group, their suppliers, and/or partners to process your personal data for participation in the selection process. Data processing will be carried out in compliance with the General Personal Data Protection Law No. 13.709/2018 and in accordance with the AXA Data Privacy Policy, available for consultation at axa.com.br/politica-de-privacidade/.
