Role Description - Gerenciar e acompanhar todo o fluxo de processos de importação, assegurando conformidade, prazos e qualidade operacional; - Digitar, revisar e registrar processos no sistema, mantendo cadastros e documentos sempre atualizados; - Emitir numerários, documentos de importação e conferência de informações junto a transportadoras, armadores, recintos alfandegados e fornecedores; - Planejar e coordenar o agendamento de carregamentos, acompanhando prazos e execução junto aos stakeholders internos e externos; - Contribuir para a análise e otimização de processos, propondo melhorias e soluções que aumentem a eficiência operacional; - Preparar relatórios gerenciais e indicadores de performance da área de importação; - Garantir o controle documental completo, arquivamento adequado e suporte a auditorias internas ou externas; - Apoiar a equipe em atividades administrativas e estratégicas da área, promovendo integração com outros setores; - Executar outras atividades correlatas ao setor, alinhadas aos objetivos estratégicos da empresa. Qualifications - Formação superior em andamento ou completa em Comércio Exterior, Relações Internacionais ou áreas correlatas. - Experiência mínima de 2 anos em rotinas de importação ou comércio exterior. - Conhecimento intermediário/avançado em Excel. - Capacidade analítica para revisão de processos, indicadores e melhorias operacionais. - Boa comunicação, organização, proatividade e dinamismo. Benefits - Remuneração: R$ 5.000,00 a R$ 5.500,00 (Sênior) - R$ 635,00 alimentação/refeição - R$ 400,00 ajuda de custo creche (caso tenha filhos até 7 anos) - Plano de saúde - Seguro de vida - Vale transporte público - TotalPass: benefício com desconto em academias Company Description

Position Title: GRC Analyst Clearance: Desired, not required Location: Huntsville, AL/Remote Salary*: $110,000+ *Dependent upon qualifications Summit 7 is here to rise above the ordinary. The work we do here goes far beyond day-to-day projects - it further protects the US defense industrial base from cyber threats, fosters thought leadership and creates growth opportunities. Our support staff, sales team and technicians are all coming together to make a difference. We also recognize that you're a person with life beyond work, that's why we invest in meaningful health and welfare benefits such as: - Excellent health/dental benefits from BCBS - See into the future with our luxurious VSP vision benefits - Prepare for the long-haul courtesy of our 401k with company matching - Unlimited mobile phone plan - 10 days' vacation, 7 days sick time - Bonuses and salary increase potential via our certifications plan We do cool work here, defying expectations by simply being who we are - each of us makes an impact. Summary We are seeking a detail-oriented GRC Analyst to join our compliance and risk management team supporting critical defense industrial base (DIB) requirements. This role is essential to our expanding compliance program portfolio, including CMMC Level 2/3, NIST 800-171 R2/R3, ISO 27001:2022, GDPR, and SOC 2 Type II certifications. As a GRC Analyst, you will be responsible for the operational execution of our compliance programs, ensuring continuous monitoring, evidence management, and risk remediation tracking across multiple frameworks. You will work closely with the VP Cybersecurity Compliance and cross-functional teams to maintain audit readiness and support the implementation of new compliance programs. This position is ideal for a compliance professional who thrives in operational roles, values process discipline, and wants to contribute to protecting national security through robust cybersecurity governance. Responsibilities Continuous Compliance Operations (55%) - Evidence Management: Collect, organize, and maintain compliance evidence on weekly, monthly, quarterly, and semi-annual schedules across all active frameworks - ServiceNow GRC Administration: Update and maintain GRC modules including control implementations, risk registers, POA&Ms, and compliance artifacts - Risk & POA&M Management: Distribute notifications to risk and POA&M owners, track remediation activities, escalate overdue items, and maintain accurate status reporting - Supplier Risk Management: Coordinate supplier risk assessments including onboarding, offboarding, and annual reviews; maintain vendor risk documentation - Cross-Framework Reconciliation: Map and reconcile evidence requirements across multiple standards as new versions are released Program Implementation Support (30%) - New Program Standup: Assist with implementation of new compliance frameworks including document gathering, gap analysis support, and stakeholder coordination - Control Implementation Tracking: Monitor and document control implementation progress, identify blockers, and support remediation efforts - Assessment Preparation: Prepare evidence packages and coordinate with assessors for C3PAO, ISO certification, and other third-party audits - Documentation Development: Support development and maintenance of System Security Plans (SSPs), policies, procedures, and compliance documentation Collaboration & Continuous Improvement (15%) - Cross-Functional Coordination: Work with IT, Engineering, HR, Legal, and other departments to gather evidence and implement controls - Process Improvement: Identify opportunities to streamline evidence collection and automate compliance workflows - Training Support: Participate in compliance training initiatives and security awareness programs - Audit Support: Serve as primary liaison for evidence requests during audits and assessments Requirements Education & Experience - Bachelor's degree in Information Security, Computer Science, Risk Management, or related field; or equivalent practical experience - 2-4 years of experience in GRC, compliance, information security, or IT audit roles - Demonstrated practitioner experience with at least one major compliance framework (NIST 800-171, ISO 27001, SOC 2, CMMC, or similar) Technical Skills - Working knowledge of NIST 800-171 R2/R3, CMMC Levels 1-3, and/or ISO 27001:2022 requirements - Experience with GRC platforms (ServiceNow GRC, Future Feed, or similar) - Proficiency with Microsoft Office 365 and collaboration tools - Understanding of information security concepts, controls, and risk management principles Core Competencies - Exceptional Attention to Detail: Ability to manage complex evidence matrices and ensure accuracy across multiple frameworks - Process Discipline: Strong adherence to established procedures and documentation standards - Organizational Skills: Ability to manage multiple deadlines, priorities, and stakeholder requests simultaneously - Communication: Clear written and verbal communication skills for stakeholder coordination and documentation - Analytical Thinking: Capability to understand control requirements and translate them into operational evidence collection activities Preferred Qualifications - Certifications: One or more of the following: - Certified CMMC Professional (CCP) or Certified CMMC Assessor (CCA) - Certified Information Systems Security Professional (CISSP) - Certified Information Security Manager (CISM) - ISO 27001 Lead Implementer or Lead Auditor - CRISC (Certified in Risk and Information Systems Control) - Experience working in defense industrial base (DIB) organizations or cleared environments - Hands-on implementation or assessment familiarity with NIST 800-171 r2/r3, NIST 800-53, NIST 800-172, or FedRAMP requirements - Background in IT operations, systems administration, or cybersecurity engineering Summit 7 Systems is an equal opportunity/ affirmative action employer and an alcohol and drug free workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. Summit 7 Systems requires background investigations. Any offer of employment is contingent upon the results of a reference/background check. We are a drug and alcohol-free workplace and require pre-employment drug screening.

Company Federal Reserve Bank of Richmond When you join the Federal Reserve—the nation's central bank—you’ll play a key role, collaborating with leading tech professionals to strengthen and protect our economic, financial and payments systems. We invest in contemporary and emerging technology each year to support the Federal Reserve and our economy, and we’re building a dynamic team for our future. Bring your passion and expertise, and we’ll provide the opportunities that will challenge you and propel your growth—along with a wide range of benefits and perks that support your health, wealth, and life. In addition to competitive compensation, we offer a comprehensive benefits package that includes tuition assistance, generous paid time off, top-notch health care benefits, child and family care leave, professional development opportunities, a 401(k) match, pension, and more. All brought together in a work environment where you can truly find balance About the Opportunity Our National Incident Response Team (NIRT), a national service provider for the Federal Reserve System (FRS), delivers effective and efficient national intrusion detection, incident response, security intelligence, threat assessment, and vulnerability assessment services for the FRS. NIRT’s mission is to play a leading role in the FRS’ efforts to protect its information systems against unauthorized use. NIRT’s Adversary Emulation team has an immediate opening for an Associate Operator to join their team as a key participant on a variety of engagements and projects that will target and evaluate the cyber security posture of people, processes, and technology within the FRS. As an Associate Operator, you will report to the Sr. Manager and work on a team of security professionals focused on enabling business line initiatives by performing security assessments against people, processes, and technologies by using automated tools and expertise of hands-on tools that simulate attacker tactics, techniques and procedures (TTPs). You will also perform assessments for new and existing services, infrastructure, and applications to identify weaknesses before an attacker does. You will use a variety of tools and techniques including penetration testing, red teaming, purple teaming, and social engineering and have the opportunity to combine your technical expertise with your imagination to discover innovative methods for ensuring that the FRS remains one step ahead of its adversaries around the world. What You Will Do - Strengthen FRS security posture through offensive security assessments where you will perform complex security assessments including the identification and exploitation of vulnerabilities across the system - Leverage offensive security foundational knowledge to support in the execution of cybersecurity solutions to benefit security engagements and mitigate cyber threats - Improve operational efficiency by building and evaluating workflow processes, procedures, checklists, automation, and tooling - Enable success of security initiatives by performing tasks to development surrounding security or technology capabilities and creating operations-based documentation - Address cybersecurity needs by advising clients on best practices and how to implement changes to securely address complex business needs - Execute on cross-team initiatives to implement cybersecurity improvements for recognized gaps - Grow security capabilities to defend the FRS by working with internal and external stakeholders to execute on strategies and plans to enforce security requirements - Identify and prioritize key risk areas balancing business risk and cyber threats via research of industry trends and business partner missions - Assist and execute technical security assessments to identify risk, likelihood and impact an attacker may have on the System due to weak or missing controls - Perform cybersecurity and Associate Operator duties as assigned Preferred experience we’re looking for: - 1-3 years of relevant information security related work experience in areas such as: computer network defense, computer network exploitation and post-exploitation - Bachelor’s degree or equivalent work experience - Understanding of adversary emulation operations including web application testing, network penetration testing, reconnaissance, social engineering, exploitation and post-exploitation, covert techniques, lateral movement, and data exfiltration - Knowledgeable in offensive cybersecurity roles, such as malware development, red teaming, penetration testing (e.g., web, infrastructure, cloud), purple team exercises in cloud and on-prem environments - Team player with interpersonal, collaborative and consultative skills - Adept attention to detail, oral and written communications skills tailored to audiences ranging from technical subject matter expert partners to senior executive stakeholders - Understanding client relationships, including determining needs, learning expectations, and demonstrating commitment to delivering quality results - Familiar with scripting/programming of Python, PowerShell, or C# with the ability to create and customize tools - The following certifications are highly preferred: GWAPT, GPEN, OSCP, CRTO Discover the Reason Why So Many People Love It Here! When you join Federal Reserve’s National IT organization, not only will you find a challenging and purposeful career, you’ll also have access to a wide range of benefits and perks that support your health and wealth, including: - Great medical benefits - Pension and 401(k) with employer match - Paid time off - Tuition reimbursement - Paid volunteer leave - Onsite amenities that make working here fun! Other Requirements and Considerations: - Candidates should review the Bank’s Code of Conduct to ensure compliance with conflict of interest rules and personal investment restrictions.    - If you need assistance or an accommodation due to a disability, please notify rich.recruitment@rich.frb.org.   - Sponsorship is not available for this role. The selected candidate will be subject to a government security investigation and must meet eligibility requirements for access to classified information. The ability to obtain and maintain a National Security Clearance (Secret or Top Secret) is required for this role. US Citizenship is required to be eligible for a National Security Clearance.   - The national hiring range for the Red Team Associate Operator/Penetration Tester is $92,600- $127,400 annually. For candidates in certain markets (Boston, MA; Chicago, IL; Los Angeles, CA; New York City Metro Area, Philadelphia, PA; San Francisco, CA; Seattle, WA), the listed hiring and salary ranges may be adjusted based on your geographic location.     - Salary offered will be based on the job responsibilities and the individual’s knowledge, skills, and experience as defined in the job qualifications/experience.    - Applications are reviewed on a rolling basis. Interested candidates are strongly encouraged to apply by April 9, 2026.   - Always verify and apply to jobs on Federal Reserve System Careers or through verified Federal Reserve Bank social media channels.  Full Time / Part Time Full time Regular / Temporary Regular Job Exempt (Yes / No) Yes Job Category Information Technology Family Group Work Shift First (United States of America) The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences. Always verify and apply to jobs on Federal Reserve System Careers (https://rb.wd5.myworkdayjobs.com/FRS) or through verified Federal Reserve Bank social media channels. Privacy Notice

Are you a hardworking Applied Cyber Security Researcher seeking a new opportunity? This could be an excellent opportunity to explore! This position has a virtual USA workstyle. Eastern Time or Central Time Zone is preferred. Aon is in the business of better decisions. At Aon, we shape decisions for the better to protect and enrich the lives of people around the world! As an organization, we are united through trust as one inclusive, diverse team, and we are passionate about helping our colleagues and clients succeed. What the day will look like As an Applied Cyber Security Researcher, you will spend your time researching emerging threats, analyzing various security data sets, and operationalizing intelligence into practical security outcomes. Your day work will involve malware and adversary behavior analysis, proactive threat hunting, development of detections and signals, and engineering tactical solutions to address evolving risks. You will collaborate with incident response and security operations teams to support investigations, enhance detection coverage, and integrate new security capabilities into Aon’s environment. Job Responsibilities: Research and Analysis - Conduct in‑depth research on emerging cyber threats, attack vectors, and security vulnerabilities. - Perform analysis on unique and large‑scale security data sets to enhance security operations across Aon. - Analyze malware, exploit kits, and other malicious tools to understand behavior, techniques, and potential countermeasures. Threat Intelligence - Gather, correlate, and analyze intelligence from multiple internal and external sources to identify potential threats. - Produce detailed tactical intelligence reports and threat assessments to support operational and leadership decision‑making. - Develop, maintain, and improve threat intelligence feeds, tooling, and workflows. - Operationalize threat intelligence to improve detection, response, and overall security posture. - Participate in proactive threat hunting activities to identify threats and indicators of compromise within Aon’s environment. - Apply multiple data sources to develop threat hunting hypotheses, signals, and techniques to uncover malicious activity. - Create and maintain threat hunting playbooks based on emerging adversary behaviors and techniques. Incident Response Investigation Support - Assist in incident response activities by offering specialized knowledge and investigative support during security incidents. - Collaborate with the Proactive Threat Operations team, Aon AC3, and other cybersecurity teams to support investigation and response efforts. Security Operations Enablement - Perform data analysis to identify trends, patterns, and indicators of compromise. - Create, tune, and curate detections and signals to enhance threat detection capabilities. - Support day‑to‑day security operations by developing and implementing security tools, workflows, and technologies. - Engineer tactical solutions to address immediate security needs and active incidents. - Collaborate with security operations teams to integrate new security technologies and tooling into existing infrastructure. - Provide technical support and expertise to sustain and improve ongoing security operations. Skills and experience that will lead to success. - 5+ years of experience in cybersecurity, with a strong focus on threat intelligence, threat research, or security operations - 3+ years of hands‑on experience conducting cyber threat research, including analysis of emerging threats, attack vectors, and vulnerabilities - 3+ years of experience analyzing large‑scale security datasets to identify malicious activity, trends, and indicators of compromise - Proven experience performing malware analysis, including investigation of malicious tools, exploit kits, and attacker techniques - 3 or more years of demonstrated experience across the threat intelligence lifecycle, including collection, correlation, analysis, and dissemination of intelligence from multiple sources - Demonstrated ability to produce high‑quality tactical intelligence reports and threat assessments for both technical and executive audiences - 2+ years of experience operationalizing threat intelligence to enhance detection, incident response, and overall security posture - 2+ years of hands-on threat hunting experience using investigative approaches and multiple security telemetry sources - Solid understanding of adversary behaviors, techniques, and frameworks such as MITRE ATT&CK - Experience creating and maintaining threat hunting playbooks, investigative procedures, and repeatable workflows - Experience supporting incident response investigations, providing technical expertise during active security incidents - 3+ years of experience working with security operations teams (SOC, threat operations, IR) in an enterprise environment - Demonstrable ability to build, tune, and curate detections, alerts, and signals to improve threat detection coverage - Strong data analysis skills with the ability to identify patterns, anomalies, and behavioral indicators of compromise - Ability to engineer tactical security solutions and respond effectively in time‑sensitive or high‑pressure scenarios - Excellent ability to convey information clearly in writing and speech, with the capacity to explain complex threats and findings Preferred Skills 5+ years of demonstrated experience in threat intelligence, threat hunting, or advanced security operations roles Experience integrating and operationalizing new security technologies within a large enterprise environment Hands‑on experience with SIEM, EDR/XDR, SOAR, and Threat Intelligence Platforms (TIPs) Scripting or query experience (e.g., Python, KQL, SPL, SQL) for analysis, detection engineering, or automation Experience developing custom tooling or workflows to support threat operations and investigations Familiarity with cloud security telemetry and hybrid enterprise environments Prior experience working in a global, highly regulated, or complex enterprise environment Relevant industry certifications (e.g., GCTI, GCFA, GREM, CRTO, GCIH or equivalent) How we support our colleagues In addition to our comprehensive benefits package, we encourage an inclusive workforce. Plus, our agile environment allows you to manage your wellbeing and work/life balance, ensuring you can be your best self at Aon. Furthermore, all colleagues enjoy two “Global Wellbeing Days” each year, encouraging you to take time to focus on yourself. We offer a variety of working style solutions for our colleagues as well. Our continuous learning culture inspires and equips you to learn, share and grow, helping you achieve your fullest potential. As a result, at Aon, you are more connected, more relevant, and more valued. Aon values an innovative and inclusive workplace where all colleagues feel empowered to be their authentic selves. Aon is proud to be an equal opportunity workplace. Aon provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, age, disability, veteran, marital, domestic partner status, or other legally protected status. People with criminal histories are encouraged to apply. We are committed to providing equal employment opportunities and fostering an inclusive workplace. If you require accommodations during the application or interview process, please let us know. You can request accommodations by emailing us at ReasonableAccommodations@Aon.com or your recruiter. We will work with you to meet your needs and ensure a fair and equitable experience. For positions in San Francisco and Los Angeles, we will consider for employment qualified applicants with arrest and conviction record in accordance with local Fair Chance ordinances. Aon is not accepting unsolicited resumes from search firms for this position. If you are a search firm, you will not be compensated in any way for your submission of a candidate, even if Aon hires that candidate. Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time. Pay Transparency Laws: The salary range for this position (intended for U.S. applicants) is $150k-$175k annually. The actual salary will vary based on the applicant’s education, experience, skills, and abilities, as well as internal equity and alignment with market data. The salary may also be adjusted based on the applicant’s geographic location. A summary of all the benefits offered for this position: Aon offers a comprehensive package of benefits for full-time and regular part-time colleagues, including, but not limited to: a 401(k) savings plan with employer contributions; an employee stock purchase plan; consideration for long-term incentive awards at Aon’s discretion; medical, dental and vision insurance, various types of leaves of absence, paid time off, including 12 paid holidays throughout the calendar year, 15 days of paid vacation per year, paid sick leave as provided under state and local paid sick leave laws, short-term disability and optional long-term disability, health savings account, health care and dependent care reimbursement accounts, employee and dependent life insurance and supplemental life and AD&D insurance; optional personal insurance policies, adoption assistance, tuition assistance, commuter benefits, and an employee assistance program that includes free counseling sessions. Eligibility for benefits is governed by the applicable plan documents and policies. #LI-KH1 2576096