FBS Information Security Specialist I (Cyber Security)

Overview

Support the Cyber Security Compliance Program by assessing cybersecurity and privacy controls, supporting audits, collecting evidence, identifying control gaps, and ensuring compliance with internal and external regulatory requirements.

What you'll do

• Assess and test cybersecurity and privacy controls against frameworks and regulations.
• Support compliance efforts related to SOC 2, NIST CSF, NYDFS, CCPA/CPRA, GDPR, LGPD, and similar requirements.
• Collect, review, and evaluate audit evidence.
• Document testing results, findings, and remediation recommendations.
• Partner with IT, Security, and business stakeholders to drive compliance activities.
• Coordinate with internal and external auditors.
• Track audit findings and ensure remediation activities are completed.
• Prepare reports and documentation for management and compliance reviews.

What you'll need

• 3+ years of experience in IT Audit, IT Risk, Information Security, Internal Controls, GRC, or Compliance.
• Understanding of IT General Controls (ITGCs), risk management, and control testing.
• Experience supporting audits and compliance assessments.
• Knowledge of cybersecurity frameworks such as NIST CSF, CIS Controls, or SOC 2.
• Strong documentation, communication, and stakeholder management skills.
• Proficiency with Microsoft Office 365.

Nice to have

• Big Four or consulting experience.
• Experience with GRC platforms (Archer, Vanta, or similar).
• Familiarity with privacy regulations such as CCPA/CPRA, GDPR, LGPD (for Brazil), or LFPDPPP (for Mexico).
• Experience working directly with external auditors.

Details

• Location: Brazil.
• Benefits differ based on employee level; includes competitive salary and performance-based bonuses, grocery vouchers, saving funds, SGMM, private health insurance, pension plan, paid time off, career development and training.
• FBS does not sponsor or obtain work authorization unless explicitly stated; candidates must have valid local legal authorization to work at the time of hire.
• Employment is exclusive; parallel employment or outside business interests must be disclosed and reviewed under FBS conflict-of-interest policies.