Business Information Security Officer

Responsibilities

• Act as the dedicated Information Security point of contact for Product and Engineering squads
• Participate actively in product rituals, planning, and reviews
• Translate security requirements into context suitable for developers, PMs, and product leaders
• Identify, evaluate, and communicate security risks to non-technical stakeholders
• Build and monitor risk treatment plans based on business impact
• Facilitate access management (IAM) between squads and security teams
• Support teams in incorporating security practices like security by design, threat modeling, and architecture reviews
• Foster a security culture that acts as an enabler rather than an obstacle

Requirements

• Solid experience in Information Security with direct interface with business, product, or software engineering
• Practical knowledge of risk management, security policies, and frameworks (ISO 27001, NIST, etc.)
• Familiarity with software development lifecycles and agile methodologies
• Strong communication and influence skills
• Business-oriented mindset and relationship management skills

Preferred Qualifications

• Experience working in technology companies or fintechs

Benefits

• Flexible working hours and models (remote, hybrid, or onsite)
• Meal or food vouchers (R$ 1144,00 monthly)
• Health and dental insurance (SulAmérica)
• Wellhub (Gympass) access
• Life insurance
• Extended maternity and paternity leave
• Childcare allowance
• Educational incentives and short-term incentives (ICP)