Descrição da Vaga

SECURITY ENGINEER - OPERATIONAL RESILIENCE (HYBRID OR REMOTE BRAZIL)

Company hires for hybrid or remote position

📍 Location: Brazil — candidates from any region are welcome

⚠️ Only candidates already based in Brazil will be considered

💼 Work Model: Hybrid for candidates living in state capitals and Remote for candidates living in countryside/cities outside the state capitals

🗣️ Language Requirements: Advanced or Fluent English

🕓 Seniority: Senior (6+ years)

💲Rate: Candidates should provide their salary expectations

⚠️ Instructions: Please send your CV in English and make sure to include all skills and experience that match the requirements of the opportunity. This will significantly increase your chances of success.

About the Opportunity

We are looking for an experienced Security Engineer – Operational Resilience to support the development and continuous improvement of Operational Resilience and Business Continuity Management frameworks.

The professional will assess business-critical processes, identify operational dependencies, develop recovery strategies, and support resilience testing across business, technology, cybersecurity, and risk teams.

Responsibilities

• Support the development and improvement of Operational Resilience and Business Continuity Management frameworks.
• Conduct and review Business Impact Analyses (BIA) and business continuity assessments.
• Identify critical business processes, services, assets, and operational dependencies.
• Define and evaluate Recovery Time Objectives (RTO), Recovery Point Objectives (RPO), and Maximum Tolerable Periods of Disruption (MTPD).
• Map dependencies across people, processes, technology, facilities, and third-party providers.
• Develop and assess business continuity and recovery strategies, including Business Continuity, Disaster Recovery, and Crisis Management Plans.
• Design disruption scenarios and support resilience testing, tabletop exercises, and simulations.
• Assess third-party resilience, identify vulnerabilities, monitor remediation plans, and prepare executive risk reports.

Requirements

• Strong professional experience in Operational Resilience, Business Continuity Management, Disaster Recovery, Crisis Management, or related areas.
• Proven experience conducting Business Impact Analyses (BIA).
• Experience developing, reviewing, and evaluating Business Continuity Plans.
• Hands-on experience with Resilience Testing and Scenario Analysis.
• Solid knowledge of RTO, RPO, and MTPD concepts.
• Experience identifying critical business processes, services, assets, and dependencies.
• Ability to collaborate with Business, Technology, Cybersecurity, Risk, and third-party stakeholders.
• Advanced or fluent English for communication in international environments.

Nice to Have

• Experience with Third-Party Risk or Vendor Resilience assessments.
• Knowledge of Disaster Recovery and Crisis Management Plans.
• Experience conducting tabletop exercises, simulations, and resilience testing.
• Certifications such as CBCP, ISO 22301, ISO 31000, or equivalent.

Ideal Candidate Profile

A Senior Operational Resilience professional with strong expertise in Business Continuity Management, Business Impact Analysis, and Disaster Recovery planning. The ideal candidate demonstrates analytical thinking, risk assessment capabilities, and experience coordinating resilience initiatives across multidisciplinary teams, ensuring business continuity and operational stability in complex environments.

5 Questions for Candidates

1. How many years of professional experience do you have in Operational Resilience, Business Continuity Management, or Disaster Recovery?
2. What is your hands-on experience conducting Business Impact Analyses (BIA) and defining RTO, RPO, and MTPD?
3. Have you developed or reviewed Business Continuity Plans, Disaster Recovery Plans, or Crisis Management Plans?
4. Can you describe your experience with Resilience Testing, tabletop exercises, critical dependency mapping, or Third-Party Resilience?
5. What are your current salary, salary expectations, and availability to work in a hybrid or remote model in Brazil?

Keywords

Operational Resilience, Security Engineer, Business Continuity Management, BCM, Business Impact Analysis, BIA, Disaster Recovery, Crisis Management, Business Continuity Planning, BCP, Disaster Recovery Planning, DRP, RTO, RPO, MTPD, Resilience Testing, Scenario Analysis, Tabletop Exercises, Third-Party Resilience, Vendor Resilience, Critical Dependencies, Risk Management, Operational Risk, Cybersecurity, Remediation Plans, CBCP, ISO 22301, ISO 31000

#EY BR