Information Security Manager
Core
Establish and maintain a robust framework for managing operational risks related to information security with a strong emphasis on compliance with Brazilian financial regulations.
Role type
Information Security Manager (GRC)
Builds
Global information security operational risk and ICT control framework compliant with Brazilian VASP license requirements
Domain
Financial Services / Information Security / Regulatory Compliance (Brazil)
Deliverable
dashboards & analysis
Required skills
Operational risk management, IT risk, IT audit, Information security governance, GRC principles, Regulatory compliance (Brazilian financial sector), Risk assessment, Control design and implementation, Fraud investigation, Policy development
Preferred skills
CRISC, CISSP, CISM, SOC 1, Vanta, GRC tools proficiency
Responsibilities
Oversee implementation of changes to global information security frameworks for Brazilian VASP license compliance; Coordinate with legal and regulatory authorities to ensure policy compliance; Update and manage the information security operational risk register; Conduct operational ICT risk assessments; Support internal and external audit processes; Design and monitor KRIs and KPIs for IT security controls; Investigate fraud cases and security incidents; Develop and update security policies and documents
Seniority
Manager, hands-on IC