<div class="content-intro">At Braze, we have found our people. We’re a genuinely approachable, exceptionally kind, and intensely passionate crew.
We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity – inside and outside our organization.
To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture.
If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can’t wait to meet you.</div>WHAT YOU'LL DO
We're seeking an English speaking Security Analyst to join our São Paulo based Security Engineering team to help Braze achieve and maintain authorization and certifications that enable us to be competitive. The GRC team is responsible for audit readiness and risk mitigation across the organization. You will be helping build internal and external compliance programs and will be exposed to a wide range of security controls protecting&nbsp; endpoint infrastructure, modern cloud-based containerized application deployments, and Web applications/API’s. You will work directly on the Security Engineering team, a technical team which will expose you to technical concepts, and the ability to have questions answered/evidence procured easily. In addition to helping guide the organization through compliance and risk frameworks, you will be a customer-facing advocate for the Braze security program, interacting with internal pre and post-sales teams to meet client expectations for compliance, technical controls, policy, and governance.
<ul>
<li>Evaluate security controls on new and existing systems, processes, and technology to ensure the adequacy and the effectiveness and provide value-added recommendations.</li>
<li>Collaborate with cross-functional teams to gather evidence in support of internal and external audits such as ISO27001, SOC 2, HIPAA, and other compliance frameworks.</li>
<li>Conduct vendor security reviews prior to onboarding with our Whistic software solution.</li>
<li>Collaborate to define Information Security requirements and develop/update policies and standards</li>
<li>Work with internal pre- and post-sales teams, as well as the Legal and Privacy team, to meet client expectations for compliance, technical controls, policy, and governance.</li>
<li>Work with security engineers to implement the enterprise-wide strategy and key initiatives focused on the reduction of technology risk.</li>
</ul>
WHO YOU ARE
<ul>
<li>You have at least 2-3 years of formalized experience in compliance or risk in the context of the tech industry.</li>
<li>You are familiar with ISO 27001, SOC 2, NIST and other Security frameworks.</li>
<li>You are able to write policies and procedures that satisfy customer and internal requirements.</li>
<li>You know how to conduct risk assessments and manage risk across multiple teams and assets.</li>
<li>You enjoy evangelizing about security and risk to anyone who will listen, be it Braze employees, Braze customers, or contractors.</li>
</ul>
Bonus:
<ul>
<li>You have a background in threat modeling.</li>
</ul><div class="content-conclusion">WHAT WE OFFER
Details of these benefits plan will be provided if a candidate receives an offer of employment. Benefits may vary by location.
From offering comprehensive benefits to fostering flexible environments, we’ve got you covered so you can prioritize work-life harmony.
<ul>
<li>Competitive compensation that may include equity</li>
<li>Retirement and Employee Stock Purchase Plans</li>
<li>Flexible paid time off</li>
<li>Comprehensive benefit plans covering medical, dental, vision, life, and disability</li>
<li>Family services that include fertility benefits and equal paid parental leave</li>
<li>Professional development supported by formal career pathing, learning platforms, and tuition reimbursement</li>
<li>Community engagement opportunities throughout the year, including an annual company wide Volunteer Week</li>
<li>Employee Resource Groups that provide supportive communities within Braze</li>
<li>Collaborative, transparent, and fun culture recognized as a Great Place to Work®</li>
</ul>
ABOUT BRAZE
Braze is a leading customer engagement platform that powers lasting connections between consumers and brands they love. Braze allows any marketer to collect and take action on any amount of data from any source, so they can creatively engage with customers in real time, across channels from one platform. From cross-channel messaging and journey orchestration to Al-powered experimentation and optimization, Braze enables companies to build and maintain absolutely engaging relationships with their customers that foster growth and loyalty.
Braze is proudly certified as a Great Place to Work® in the U.S., the UK and Singapore. We ranked #3 on Great Place to Work UK’s 2024 Best Workplaces (Large), #3 on Great Place to Work UK’s 2023 Best Workplaces for Wellbeing (Medium), #4 on Great Place to Work’s 2023 Best Workplaces in Europe (Medium), #10 on Great Place to Work UK’s 2023 Best Workplaces for Women (Large), #19 on Fortune’s 2023 Best Workplaces in New York (Large). We were also featured in Built In's 2024 Best Places to Work, U.S. News Best Technology Companies to Work For, and Great Place to Work UK’s 2023 Best Workplaces in Tech.
You’ll find many of us at headquarters in New York City or around the world in Austin, Berlin, Chicago, Jakarta, London, Paris, San Francisco, Singapore, Sydney and Tokyo – not to mention our employees in nearly 50 remote locations.
BRAZE IS AN EQUAL OPPORTUNITY EMPLOYER
At Braze, we strive to create equitable growth and opportunities inside and outside the organization.
Building meaningful connections is at the heart of everything we do, and that includes our recruiting practices. We're committed to offering all candidates a fair, accessible, and inclusive experience – regardless of age, color, disability, gender identity, marital status, national origin, race, religion, sex, sexual orientation, or status as a protected veteran. When applying and interviewing with Braze, we want you to feel comfortable showcasing what makes you&nbsp;you.
We know that sometimes different circumstances can lead talented people to hesitate to apply for a role unless they meet 100% of the criteria. If this sounds familiar, we encourage you to apply, as we’d love to meet you.
Please see our <a class="c-link" href="https://www.braze.com/company/legal/privacy-policy-job-candidates" target="_blank" data-stringify-link="https://www.braze.com/company/legal/privacy-policy-job-candidates" data-sk="tooltip_parent">Candidate Privacy Policy</a>&nbsp;for more information on how Braze processes your personal information during the recruitment process and, if applicable based on your location, how you can exercise any privacy rights.</div>

At Braze, we have found our people. We’re a genuinely approachable,
exceptionally kind, and intensely passionate crew.

We seek to ignite that passion by setting high standards, championing
teamwork, and creating work-life harmony as we collectively navigate rapid
growth on a global scale while striving for greater equity and opportunity –
inside and outside our organization.

To flourish here, you must be prepared to set a high bar for yourself and
those around you. There is always a way to contribute: Acting with autonomy,
having accountability and being open to new perspectives are essential to our
continued success. Our deep curiosity to learn and our eagerness to share
diverse passions with others gives us balance and injects a one-of-a-kind
vibrancy into our culture.

If you are driven to solve exhilarating challenges and have a bias toward
action in the face of change, you will be empowered to make a real impact
here, with a sharp and passionate team at your back. If Braze sounds like a
place where you can thrive, we can’t wait to meet you.

 **WHAT YOU'LL DO**

We're seeking an English speaking Security Analyst to join our São Paulo based
Security Engineering team to help Braze achieve and maintain authorization and
certifications that enable us to be competitive. The GRC team is responsible
for audit readiness and risk mitigation across the organization. You will be
helping build internal and external compliance programs and will be exposed to
a wide range of security controls protecting  endpoint infrastructure, modern
cloud-based containerized application deployments, and Web applications/API’s.
You will work directly on the Security Engineering team, a technical team
which will expose you to technical concepts, and the ability to have questions
answered/evidence procured easily. In addition to helping guide the
organization through compliance and risk frameworks, you will be a customer-
facing advocate for the Braze security program, interacting with internal pre
and post-sales teams to meet client expectations for compliance, technical
controls, policy, and governance.

  * Evaluate security controls on new and existing systems, processes, and technology to ensure the adequacy and the effectiveness and provide value-added recommendations.
  * Collaborate with cross-functional teams to gather evidence in support of internal and external audits such as ISO27001, SOC 2, HIPAA, and other compliance frameworks.
  * Conduct vendor security reviews prior to onboarding with our Whistic software solution.
  * Collaborate to define Information Security requirements and develop/update policies and standards
  * Work with internal pre- and post-sales teams, as well as the Legal and Privacy team, to meet client expectations for compliance, technical controls, policy, and governance.
  * Work with security engineers to implement the enterprise-wide strategy and key initiatives focused on the reduction of technology risk.

**WHO YOU ARE**

  * You have at least 2-3 years of formalized experience in compliance or risk in the context of the tech industry.
  * You are familiar with ISO 27001, SOC 2, NIST and other Security frameworks.
  * You are able to write policies and procedures that satisfy customer and internal requirements.
  * You know how to conduct risk assessments and manage risk across multiple teams and assets.
  * You enjoy evangelizing about security and risk to anyone who will listen, be it Braze employees, Braze customers, or contractors.

Bonus:

  * You have a background in threat modeling.

**WHAT WE OFFER**

_Details of these benefits plan will be provided if a candidate receives an
offer of employment. Benefits may vary by location._

From offering comprehensive benefits to fostering flexible environments, we’ve
got you covered so you can prioritize work-life harmony.

  * Competitive compensation that may include equity
  * Retirement and Employee Stock Purchase Plans
  * Flexible paid time off
  * Comprehensive benefit plans covering medical, dental, vision, life, and disability
  * Family services that include fertility benefits and equal paid parental leave
  * Professional development supported by formal career pathing, learning platforms, and tuition reimbursement
  * Community engagement opportunities throughout the year, including an annual company wide Volunteer Week
  * Employee Resource Groups that provide supportive communities within Braze
  * Collaborative, transparent, and fun culture recognized as a Great Place to Work®

**ABOUT BRAZE**

Braze is a leading customer engagement platform that powers lasting
connections between consumers and brands they love. Braze allows any marketer
to collect and take action on any amount of data from any source, so they can
creatively engage with customers in real time, across channels from one
platform. From cross-channel messaging and journey orchestration to Al-powered
experimentation and optimization, Braze enables companies to build and
maintain absolutely engaging relationships with their customers that foster
growth and loyalty.

Braze is proudly certified as a Great Place to Work® in the U.S., the UK and
Singapore. We ranked #3 on Great Place to Work UK’s 2024 Best Workplaces
(Large), #3 on Great Place to Work UK’s 2023 Best Workplaces for Wellbeing
(Medium), #4 on Great Place to Work’s 2023 Best Workplaces in Europe (Medium),
#10 on Great Place to Work UK’s 2023 Best Workplaces for Women (Large), #19 on
Fortune’s 2023 Best Workplaces in New York (Large). We were also featured in
Built In's 2024 Best Places to Work, U.S. News Best Technology Companies to
Work For, and Great Place to Work UK’s 2023 Best Workplaces in Tech.

You’ll find many of us at headquarters in New York City or around the world in
Austin, Berlin, Chicago, Jakarta, London, Paris, San Francisco, Singapore,
Sydney and Tokyo – not to mention our employees in nearly 50 remote locations.

**BRAZE IS AN EQUAL OPPORTUNITY EMPLOYER**

At Braze, we strive to create equitable growth and opportunities inside and
outside the organization.

Building meaningful connections is at the heart of everything we do, and that
includes our recruiting practices. We're committed to offering all candidates
a fair, accessible, and inclusive experience – regardless of age, color,
disability, gender identity, marital status, national origin, race, religion,
sex, sexual orientation, or status as a protected veteran. When applying and
interviewing with Braze, we want you to feel comfortable showcasing what makes
you  _you_.

We know that sometimes different circumstances can lead talented people to
hesitate to apply for a role unless they meet 100% of the criteria. If this
sounds familiar, we encourage you to apply, as we’d love to meet you.

_Please see our_ _[Candidate Privacy
Policy](https://www.braze.com/company/legal/privacy-policy-job-candidates)_ _
for more information on how Braze processes your personal information during
the recruitment process and, if applicable based on your location, how you can
exercise any privacy rights._

