Business Analyst

Job Title: Business Analyst – Third-Party Cyber Risks (TPRM)

Job Description:

We are looking for a Business Analyst to work with assessment and management of third-party cyber risks (TPRM), in a strategic and highly regulated environment.

This professional will be responsible for acting at the interface between business areas, information security, compliance, and external partners, ensuring that suppliers, partners, and clients (including BaaS) are compliant with risk, privacy, and business continuity policies.

The position is fundamental to sustaining the growth of the third-party ecosystem, bringing more governance, quality, and efficiency to the processes.

Responsibilities:

• Conduct third-party cyber risk, privacy, and business continuity assessment processes
• Act in the approval and due diligence of suppliers and partners
• Gather, analyze, and document business requirements related to third-party management
• Prepare risk reports, dashboards, and executive presentations
• Monitor action plans with the involved areas, ensuring compliance with deadlines
• Act in the operation and evolution of GRC tools (such as OneTrust)
• Support regulatory compliance (e.g., BACEN) and internal policies
• Be a bridge between technical and business areas, facilitating communication and decision-making

Required Requirements:

• Experience as a Business Analyst, preferably in security, risk, or compliance
• Knowledge in TPRM (Third-Party Risk Management)
• Experience with supplier assessment (due diligence)
• Experience with GRC tools (preferably OneTrust)
• Knowledge in cyber risks, privacy, and business continuity
• Experience in preparing reports and presentations for stakeholders
• Strong analytical skills and organization

Differentials:

• Experience in the financial sector, banks, or fintechs
• Knowledge in regulations (e.g., BACEN)
• Understanding of LGPD and data privacy
• Experience with indicators and metrics-based management

Desired Profile:

• Analytical profile and solution-oriented
• Good communication and negotiation skills
• Business vision and critical thinking
• Proactivity and sense of ownership