IT Security & Compliance Consultant

About you You are someone who provide security, compliance, and risk oversight and drive the creation of the detailed inventory and classification of installed applications—ensuring the taxonomy defined in the charter is implemented (name, version, publisher, category, description, EOL date, plus owner/team fields for future phases), data is normalized across Systems, and risks are surfaced with clear next steps. You bring to Applaudo the following competencies: Bachelor’s Degree in Computer Science, Software Engineering, Computer Engineering, or a related field (preferred) or an equivalent combination of education and experience. 5–7 years of experience in security, compliance, or Software Asset Management (SAM) governance. Hands-on experience with Intune, NinjaOne, and ServiceNow SAM. Strong skills in data normalization, taxonomy design, and software lifecycle/EOL management. Excellent analytical and problem-solving abilities with a keen eye for data quality and governance. Strong communication and collaboration skills to coordinate across technical and business teams. Ability to document processes, identify risks, and provide structured recommendations. Advanced English proficiency to interact effectively with global stakeholders. You will be accountable for the following responsibilities: Detailed Inventory Build (Installed Apps): Lead aggregation from multiple sources; reconcile source differences; produce a single authoritative baseline of applications and versions for workstations, mobile devices, and servers. Classification & Taxonomy Execution: Implement the charter’s taxonomy fields (Application name, Version, Publisher, Category, Description, End-of-life date; define placeholders for Primary Business Owner, Technical Owner, Team using the application for future phases). Ensure every discovered app is categorized per the defined category scheme and platform (Win/Mac/iOS/Android/Server). Normalization Rules: Define and apply deduplication and normalization (e.g., normalize publisher strings, collapse installer variants, consolidate minor version drift) so each entry represents a canonical application version. Quality & Coverage Checks: Establish data-quality gates (required fields populated for scope; minimal “Unknown publisher” entries; alignment of device coverage to endpoints in scope). Maintain an Excluded Items log for anything out-of-scope with rationale. Security/EOL Enrichment: Add security-relevant attributes/workflows (EOL flagging, vulnerable/high-risk categories, privileged tools). Create a practical CVE lookup workflow for later phases; prioritize EOL and obviously risky categories. Validation with Business: Facilitate validation sessions with Managing Directors/Dept Leads to confirm the catalog reflects reality; capture deltas and residual risks. Risk Assessment & Inputs to Roadmap: Document findings (unsupported software, shadow IT indicators, risky categories) and quick wins that feed the implementation roadmap/policies (policy drafting is later-phase). Additional Information All your information will be kept confidential according to EEO guidelines. Here at Applaudo Studios values as trust, communication, respect, excellence and team work are our keys to success. We know we are working with the best and thus treat each other with respect and admiration without asking. Submit your application today, and don't miss this opportunity to join the Best Digital team in the Region! We truly appreciate all the hard and outstanding work our team makes every day at Applaudo Studios, and that's why the perks that we offer, are deeply thought and designed as a way to thank them for their commitment and excellence. Some of our perks and benefits: Celebrations Special discounts* Entertainment area* Modern Work Spaces* Great work environment Private medical insurance* *Benefits may vary according to your location and/or availability. Request further information when applying.

Location: São Paulo, BR

Posted Date: 11/6/2025