GRC ANALYST

GRC Analyst - Weve fused cutting-edge hardware with innovative software into one powerful platform, disrupting legacy systems and delivering smarter, faster solutions for our clients. At TRACTIAN, you'll break boundaries, question convention, and collaborate with top talent to drive real change. As a part of our growth-stage startup, youll work alongside the founders, shaping the vision, products, and experiences that will define the future of industrial tech. Governance at TRACTIANThe Governance team ensures that data across TRACTIAN is managed effectively, with a focus on accuracy, consistency, and compliance. This department establishes policies and procedures that define how data is handled, ensuring that it is accessible to the right people and used appropriately. Data Governance is responsible for maintaining data quality and integrity, enforcing regulatory compliance, and making sure that all data processes align with both internal and external standards, allowing TRACTIAN to operate efficiently and ethically. What you'll doAs a GRC Analyst, your primary responsibility will be to ensure the companys adherence to governance, risk, and compliance standards. You will conduct thorough assessments, identify potential risks, and implement strategies to mitigate them. Your work will directly contribute to strengthening our risk management framework, ensuring regulatory compliance, and enhancing internal controls through detailed analysis and proactive risk identification. ResponsibilitiesPerform Business Impact Analysis (BIA), mapping processes and identifying RTO and RPO. Map processes and identify risks, creating and implementing action plans. Update internal policies and procedures for BCP and Disaster Recovery. Collaborate with other departments to create and modify operational processes and agreements and execute actions from action plans. Conduct and document regular tests for recovery and continuity plans (disaster recovery exercise, backup & data recovery, etc. ). Implement improvements and corrections stemming from audits and assessments. Monitor and conduct assessments to ensure the effectiveness of internal controls. Implement privacy controls following the companys governance guidelines and LGPD, GDPR, and CCPA regulations. Assist in the continuous improvement of compliance with ISO 27001, 27002, 22301, and 22313 standards. RequirementsBackground in IT, auditing, compliance, and quality. Experience with ISO 27001, 27002, 22301, and 22313 standards. Strong knowledge of LGPD, GDPR, and CCPA. Hands-on experience in executing action plans and implementing controls. Advanced English proficiency. CompensationCompetitive salary and stock options Optional fully funded English / Spanish courses 30 days of paid annual leave Education and courses stipend Earn a trip anywhere in the world every 4 years Day off during the week of your birthday Up to R$1. 000/mo for meals and remote work allowance Health plan with national coverage and without coparticipation Dental Insurance: we help you with dental treatment for a better quality of life. Gympass and Sports Incentive: R$300/mo extra if you practice activities #J-18808-Ljbffr