Qualifications
Responsibilities:Lead the annual Business Continuity Management (BCP) process, including scope reviews, validation of plan adherence, coordination of Business Impact Analysis (BIA), simulation exercises, and plan updates.Translate technical data into business indicators, calculating and promoting metrics such as QRE and ROSI, while creating dashboards and executive presentations to support initiative prioritization and budgetary decisions.Conduct governance, risk, and compliance assessments on projects and services, including cloud environments, applications, and suppliers.Define, review, and operationalize security policies, standards, and controls in alignment with frameworks like ISO 27001, NIST, SOC, and PCI.Coordinate internal and external audits, engaging stakeholders and monitoring remediation actions to completion.Manage vendor-related risks and contractual security requirements.Convert technical and organizational risks into clear recommendations and priorities for business units.Operate and optimize GRC tools and security platforms, supporting adjustments in SIEM and incident response playbooks.Automate controls and processes through scripts or CI pipelines, proposing continuous improvements.Serve as a technical reference within the team, mentoring peers, and disseminating best security practices.Qualifications:Practical experience in Information Security, with a focus on GRC, auditing, or compliance.Experience with Business Continuity Management (BCP/DRP), including BIA execution and continuity exercises coordination.Strong analytical skills and the ability to communicate effectively with technical and non-technical stakeholders.Familiarity with security frameworks and compliance regulations.
About the job
At Zup Innovation, we are driven by a mission to create groundbreaking technologies that challenge the status quo and transform our clients' operations. We are on the lookout for talented professionals who thrive in an environment that values excellence and innovation. If you resonate with a collaborative workplace fueled by curiosity, we invite you to join us in shaping the future of technology.
As a Senior Security Analyst, your primary focus will be on Governance, Risk Management, and Compliance (GRC) within the realm of Information Security. You will support the advancement of our information security maturity, ensuring that our practices, processes, and controls are aligned with business needs and leading industry frameworks. Your role will be pivotal in risk management, business continuity, audits, and security governance, as well as collaborating with various departments to enhance our security culture.
About Zup Innovation
Zup Innovation is at the forefront of technological advancement, dedicated to creating solutions that redefine industry standards and empower our clients. We foster a culture that prioritizes creativity and collaboration, making us a leader in technology innovation.
