IT Information Security Systems Supervisor

The Information and Security Systems Supervisor is responsible for overseeing the institution’s information security and cybersecurity posture, as well as the management of physical security systems and technologies, ensuring the protection of information assets, IT infrastructure, and facilities.
The incumbent works closely with the Network and Systems Supervisors to ensure secure and resilient IT operations, while supporting the IT Manager in managing security risks, strengthening operational resilience, and ensuring compliance with applicable regulatory requirements and international security standards and frameworks.
Responsabilities
Security Governance & Compliance
Develop, implement, and maintain policies, standards, and procedures covering information security, cybersecurity, and physical security systems.
Ensure compliance with applicable regulatory requirements and relevant international standards and frameworks, including ISO 27001 and the NIST Cybersecurity Framework (NIST CSF).
Coordinate and support internal and external audits related to information security, cybersecurity, and physical security systems.
Maintain accurate and up-to-date security documentation, including risk registers, incident records, security-related asset inventories, and other required records.
Cybersecurity Operations
Oversee day-to-day security monitoring, threat detection, vulnerability management, and security incident handling.
Manage and monitor cybersecurity tools and controls, including firewalls, Security Information and Event Management (SIEM), endpoint protection, Intrusion Detection and Prevention Systems (IDS/IPS), and identity and access management systems.
Lead cybersecurity incident response activities and coordinate investigation, containment, remediation, and follow-up actions with relevant teams.
Ensure secure configuration, timely patching, and appropriate hardening of systems, networks, and security infrastructure.
Physical Security Systems Management
Oversee the operation, maintenance, availability, and security of CCTV, access control, alarm, fire detection, and other electronic physical security systems.
Ensure secure configuration and appropriate integration of physical security systems with the IT infrastructure.
Coordinate with Facilities and Security teams to ensure alignment of security systems, operational practices, and incident response procedures.
Manage and periodically review user access rights, system logs, configurations, and monitoring tools associated with physical security platforms.
Risk Management
Conduct and support security risk assessments covering information systems, IT infrastructure, and physical security technologies.
Identify vulnerabilities and security risks, assess their potential impact, and recommend appropriate mitigation measures.
Monitor identified security risks and follow up on agreed mitigation and corrective actions.
Support business continuity and disaster recovery planning, testing, and improvement from an information and systems security perspective.
Collaboration & Technical Leadership
Work closely with the Network and Systems Supervisors to ensure secure architecture, configuration, and operational practices.
Provide technical guidance on secure system design, access controls, infrastructure changes, and the implementation of security requirements.
Participate in IT and facilities-related projects to ensure that security requirements and controls are incorporated from the design and planning stages.
Provide security input into the evaluation and implementation of new technologies, systems, and infrastructure changes.
Security Awareness & Capacity Building
Lead and support security awareness initiatives for employees and contractors.
Provide training and technical guidance to IT and relevant security personnel on secure practices, security controls, and emerging threats.
Promote a culture of security awareness, accountability, and continuous improvement across the organization.
Honor Degree in information security, Computer Science, Information Systems, Electronics, or related field.
CISSP, CISM, CEH, CompTIA Security.
ISO 27001 Lead Implementer/Auditor.
Certifications related to physical security systems (e.g., CCTV, access control platforms) are an advantage.
Experience
Minimum of 5 years of experience in IT security, systems administration, network security, or security systems management.
Experience supervising or coordinating technical teams is an advantage.
Proven experience with cybersecurity tools and physical security technologies.
Competencies
Proficiency in Portuguese and English.
Strong analytical and problem‑solving.
Strong understanding of cybersecurity principles and physical security technologies.
Knowledge of regulatory and compliance frameworks.
Analytical and problem-solving skills.
Ability to lead cross functional teams and manage complex security issues.
Excellent communication and documentation skills.
High ethical standards and commitment to confidentiality.

Employment type
Full-time

Work arrangement
No