Information Security Manager (iGaming)

TL;DR

Information Security Manager (iGaming): Establishing, managing, and maturing a comprehensive information security framework in Brazil with an accent on protecting digital assets, customer data, and ensuring strict compliance with local regulations. Focus on defining security vision, strategy, and architecture, serving as the top security authority in the region, and leading incident response.

Location: On-site in São Paulo, Brazil

Company

hirify.global is an iGaming company focused on establishing and maturing a comprehensive information security framework in Brazil.

What you will do

• Develop, implement, and maintain a robust information security strategy, roadmap, and architecture.
• Establish and enforce security policies, procedures, and guidelines across all departments.
• Manage the annual Information Security budget and oversee risk assessments, vulnerability management, and penetration testing.
• Ensure rigorous compliance with all relevant Brazilian and international regulations, notably the LGPD.
• Lead the incident response team, developing protocols for managing security breaches and minimizing business impact.
• Manage security technologies (SIEM, EDR, Firewalls) and ensure their effective operation and monitoring.
• Build, mentor, and lead the local security team, fostering a culture of security consciousness.

Requirements

• Minimum of 8 years of experience in Information Security, with at least 4 years in a senior leadership role.
• Deep, demonstrable knowledge of the LGPD and proven experience in achieving and maintaining compliance.
• Expertise in developing and implementing comprehensive security frameworks (e.g., ISO 27001, NIST CSF).
• Proven experience in managing and mentoring a dedicated security team.
• Fluency in Portuguese (native or near-native) and professional working proficiency in English (B2 required).

Nice to have

• Relevant industry certifications (e.g., CISSP, CISM, C-CISO).
• Experience with security in cloud-native environments (AWS/Azure security architecture).
• Familiarity with the Brazilian regulatory environment beyond LGPD.