About the RoleCloudWalk is seeking a Security GRC Analyst with experience in risk management, compliance, and audit readiness to join our fast-paced Compliance team.We’re not looking for a traditional compliance profile — this is a role for someone who wants to bring GRC into the future: automated, integrated, product-aware, and deeply aligned with how modern technology companies operate.You’ll help us operate and improve our compliance stack (e.g. PCI, SOC 1 and 2, BCB 85/21), manage risks, and contribute to evolving our security bots and agents that power GRC at scale.At CloudWalk, we build secure systems without slowing things down. GRC is not a blocker — it’s a platform for trust and scale. You'll join a collaborative team that values curiosity, autonomy, and clean execution.If you want to leave behind the checklist-driven mindset and move toward real GRC-as-code, this is your place.
What You'll Do
- Own the operation of our GRC platform and ensure evidence, controls, and risks are tracked and updated
- Support internal and external audits (PCI, SOC 1 and 2, BCB 85/21), control testing, and remediation tracking
- Map risks, define controls, and partner with teams across Engineering, Product, and Legal
- Participate in the evolution of our automated bots that streamline GRC
- Explore opportunities to automate and integrate GRC workflows using APIs, scripts, or AI tools
What You'll Need to Succeed
- Previous experience in Security GRC, audit, or risk management
- Understanding of frameworks such as PCI-DSS, PCI PIN, PCI SSF, PCI MPoC, SOC 1 and 2, ISO 27001, and BCB Resolution 85/21
- Excellent communication and documentation skills
- Analytical thinking and structured problem-solving
- Eagerness to learn about cloud security, automation, and AI-powered bots
Nice to Have
- Familiarity with cloud-native environments
- Scripting (Python, Go, or Typescript),
- API-based integrations
- Security automation tools
- Model Context Protocol (MCP)
- LLM-based systems
By applying for this position, your data will be processed as per Cloudwalk's Privacy Policy that you can read here in Portuguese and here in English.
Report job
