Posted 26 days ago

Privacy Analyst

São PauloRemote

AI Summary

Privacy Analyst who assists in incident response related to personal data, performs triage, containment, root cause analysis and remediation tracking, and collaborates with Security, Engineering, Product, Legal and Compliance.

About this role

About CloudWalk:

We are not just another fintech unicorn. We are a pack of dreamers, makers, and tech enthusiasts building the future of payments. With millions of customers and a hunger for innovation, we're now expanding our neural network - literally and metaphorically.

What You'll Be Doing:

Support privacy and security incident response involving personal data, including triage, containment, root cause analysis and remediation tracking;

Assess incident scope and severity by identifying affected systems, data categories, impacted data subjects, logs, APIs, databases and exposure vectors;

Review privacy, security and data governance documentation, including incident response playbooks, technical procedures and access control materials;

What You Need To Succeed:

Strong communication skills to translate technical findings, such as cloud misconfigurations, access control gaps or log exposure, into privacy, regulatory and business risks;

Ability to support incident handling activities, including impact assessment, evidence gathering, containment follow-up and remediation tracking;

Ability to work with Security, Engineering, Product, Legal and Compliance teams on privacy and security-related topics;

It Will Be a Plus If You Have:

Previous experience in Privacy, Data Protection, Information Security, GRC, SecOps or Incident Response;

Hands-on experience with incidents involving cloud environments, logs, credentials or access control failures;

Technical familiarity with cloud infrastructure, monitoring, logging, encryption and identity/access management;

Skills

Access ControlCloud InfrastructureCloud SecurityContainment StrategiesData CategoriesData GovernanceData SubjectsEncryptionEvidence GatheringForensicsIdentity And Access ManagementIncident ResponseLog AnalysisPlaybooksPolicy ReviewPrivacy By DesignRegulatory KnowledgeRisk AssessmentRoot-cause Analysis