IT Security Specialist at International… · São Paulo

IT Security Specialist

Location: São Paulo, SP

The International Council on Clean Transportation (ICCT) is seeking an IT Security Specialist to join our global IT team. As ICCT builds internal IT capacity, this role will take ownership of the organization’s security platforms and day-to-day security operations, ensuring our systems, data, and staff are protected against evolving threats across all global offices.

The IT Security Specialist will administer and optimize ICCT’s security toolstack, monitor risks, respond to incidents, and support compliance with applicable data protection regulations. The role will work closely with the IT Director and collaborate with staff across ICCT’s offices worldwide.

You Will

• Administer and maintain ICCT’s security platforms, including endpoint detection and response (EDR) tools, web filtering and network threat prevention, SIEM, and identity and access management (IAM) systems.
• Manage endpoint security across ICCT’s device fleet using mobile device management (MDM) and endpoint protection platforms, ensuring devices are enrolled, compliant, and receiving current security policies.
• Monitor security dashboards, alerts, and threat intelligence feeds; triage and respond to security incidents promptly.
• Oversee email security solutions and coordinate security awareness training programs, including phishing simulations and staff education campaigns.
• Manage identity and access controls across IAM and directory platforms, ensuring secure authentication, single sign-on, and appropriate access provisioning.
• Conduct regular risk assessments, vulnerability scans, and security audits; coordinate penetration testing as needed.
• Maintain and update ICCT’s IT security policies, standards, and incident response procedures.
• Support compliance with applicable data protection regulations, including Brazil’s LGPD and the EU’s GDPR; serve as a point of contact for privacy and security-related inquiries.
• Manage VPN infrastructure and support firewalls and network security appliances across ICCT offices.
• Manage privileged access and password management systems; oversee credential lifecycle and secure storage practices.
• Monitor SaaS application security and oversee data backup validation across cloud platforms.
• Perform vendor security reviews and ensure that third-party systems meet ICCT’s security and privacy requirements.
• Support onboarding and offboarding processes, including secure device provisioning and account decommissioning.
• Communicate security risks and recommendations clearly to both technical and non-technical audiences, including senior leadership.
  

You Have: Required

• Bachelor’s degree in Information Security, Computer Science, or a related field (or equivalent experience).
• 3–5 years of hands-on experience in IT security, information assurance, or a related role.
• Demonstrated experience administering endpoint management and security tools (MDM and EDR platforms).
• Hands-on experience with SIEM platforms, EDR tools, and identity management systems.
• Solid understanding of security frameworks, threat prevention, and incident response processes.
• Familiarity with data protection regulations, particularly LGPD (Brazil), GDPR (EU), or equivalent.
• Strong analytical and problem-solving skills with the ability to manage multiple priorities across time zones.
• Excellent written and verbal communication skills in English; ability to explain technical concepts to non-technical audiences.
• Ability to work independently and collaborate effectively across global, distributed teams.
  

Preferred

• Professional certifications such as CompTIA Security+, CISSP, CISM, or equivalent.
• Experience with enterprise productivity suite security features, including conditional access, data loss prevention, and threat protection.
• Familiarity with cloud security concepts and major cloud platforms.
• Experience in international nonprofit or research organizations.
• Portuguese language skills (strong plus for Brazil-based candidates).
• Experience with Zero Trust architecture and identity-based access controls.
  

Position Details

The ICCT is an independent, global, non-profit research organization that supports effective policy-making on climate change and public health by providing timely, accurate, data-driven research and advice to regulators, NGOs, and other stakeholders. The ICCT has offices in Washington DC, San Francisco, Berlin, Beijing, São Paulo, and New Delhi. TheICCT offers a mission-driven, egalitarian, culturally diverse workplace where intelligence, flexibility, transparency, and good humor are highly valued. We offer a competitive salary plus an excellent benefits package.

Application

To apply, please upload your resume, a cover letter indicating your interest, salary expectations, and the names and contact information for three professional references. Submissions that are missing a cover letter will be given less consideration. The position is open immediately and will remain open until filled. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace.