São Paulo Office - Hybrid: 4 days in the office, 1 day working from homeEbury is a hyper-growth FinTech firm, named in 2021 as one of the top 15 European Fintechs to work for by Glassdoor and AltFi.
We offer a range of products including FX risk management, trade finance, currency accounts, international payments and API integration.About the Role:We are looking for a highly experienced Senior Information Security Manager to join our team in São Paulo, Brazil.
In this role, you will be the daily lead for Ebury Group and Ebury Bank Brazil on all Information Security matters, responsible for ensuring our security protocols meet international standards and local regulatory requirements.
You will play a key role in safeguarding our systems, data, and operations, particularly in relation to PCI DSS, ISO27001, SOC2 and Brazilian data privacy laws.Key Responsibilities:Act as the daily lead for Ebury Group and Ebury Bank Brazil on all Information Security matters, ensuring adherence to security standards, frameworks, and best practices.Oversee and manage the organisation's compliance with PCI DSS, ISO27001, and other security frameworks, ensuring consistent execution across the business.Manage security risk assessments and mitigation strategies to protect sensitive data and infrastructure.Ensure compliance with LGPD (Lei Geral de Proteção de Dados) and other local data privacy regulations.Serve as the primary point of contact for reporting security matters to Banco Central do Brasil and other regulatory bodies.Develop and implement security awareness training programs for the organisation.Collaborate with global teams and cross-functional departments, such as IT, Risk, and Legal, to integrate security measures throughout the organisation.Stay current on emerging security threats, industry trends, and regulatory updates.Mentor and guide junior members of the security team, fostering a culture of security within the organisation.Requirements:At least 8 years of experience in information security, with 5+ years in a leadership or managerial position.Proven expertise in PCI DSS, ISO27001 and SOC2 compliance.Demonstrated experience in a financial institution, ideally reporting to Banco Central do Brasil or similar regulatory bodies.Strong knowledge of Brazilian data privacy laws (LGPD).Excellent verbal and written communication skills in Portuguese and a good level of spoken and written English.Hands-on experience in managing risk, security audits, and incident response protocols.Ability to work in a fast-paced, cross-functional environment, coordinating with international teams.Strong project management skills and experience leading security initiatives.Preferred Qualifications:Degree in Information Security / Cyber Security related field.Previous experience in a security leadership role within a financial institution.CISM (Certified Information Security Manager) or CISSP (Certified Information Systems Security Professional).Knowledge of evolving security trends and technologies within the financial industry.#J-18808-Ljbffr