10 часов назад
Information Security Manager (Fintech)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Information Security Manager (Fintech): Establishing and maintaining information security operational risk frameworks, controls, and documentation for Brazilian financial regulatory compliance with an accent on ICT risk, governance, and operational resilience. Focus on implementing controls for the Brazilian VASP license, assessing risks across systems and business processes, and coordinating audits, investigations, and remediation.
Location: São Paulo, Brazil; hybrid/remote working policy
Company
provides stablecoin and fiat payment infrastructure for enterprises and is part of Mastercard.
What you will do
- Modify and implement global information security operational risk and ICT control frameworks for compliance with Brazilian financial regulations.
- Support the application for and maintenance of the Brazilian VASP financial license under BCB Resolution 520/25.
- Manage ICT risk assessments, operational risk registers, control self-assessments, and risk reporting.
- Design and monitor KRIs, KPIs, security controls, fraud controls, and operational resilience mechanisms.
- Coordinate with legal representatives, external counsel, regulatory authorities, business owners, and auditors.
- Investigate fraud cases, security incidents, and privacy violations; develop policies, reports, and remediation initiatives.
Requirements
- Bachelor’s degree in Business, Information Technology, Information Security, or a related field, or equivalent experience.
- Experience in operational risk management, IT risk, IT audit, or information security governance.
- Deep knowledge of Brazilian information security regulations for the financial sector.
- Strong understanding of security controls, governance, risk, and compliance principles.
- Experience developing, implementing, and maintaining operational risk frameworks and using GRC tools.
- Strong analytical, problem-solving, collaboration, and communication skills.
Nice to have
- CRISC, CISSP, CISM, or similar professional certification.
- Experience with SOC 1 and Vanta.
Culture & Benefits
- Competitive salary and flexible working hours.
- Hybrid working with a flexible approach to holidays.
- Growth-minded, open, and creative working environment.
- Opportunities to travel to offices around the world.
- Diverse and inclusive team distributed across EMEA, North America, and APAC.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →