The Information Security Governance Manager role at EBANX is an on-site position based in Curitiba, focusing on leading security risk management and governance initiatives. This opportunity suits an experienced security leader with a background in compliance, team mentorship, and global standards.
Role Overview
In this position, the professional leads and develops a high-performing Information Security team dedicated to risk management and security governance. The individual drives the identification, assessment, prioritization, and treatment of information security risks while communicating risk exposure to senior leadership. Responsibilities include defining the security governance framework, overseeing compliance programs, and partnering with cross-functional departments to embed security practices into strategic initiatives.
Key Responsibilities
Oversee the implementation, maintenance, and continuous improvement of compliance programs and global certifications.
Define and maintain the Information Security governance framework, covering policies, standards, procedures, and control oversight.
Coordinate internal and external audits, security assessments, and the execution of remediation and risk treatment plans.
Define, monitor, and report security KPIs, KRIs, and program effectiveness metrics to business and executive stakeholders.
Drive the organization's security awareness and culture strategy through training programs, phishing simulations, and employee engagement.
Ensure security requirements are incorporated into new products, services, vendors, and third-party relationships from the early stages.
Provide regular reporting on security governance, compliance status, and the risk landscape to leadership and relevant forums.
Requirements
Proven experience leading, motivating, coaching, and developing people in professional teams.
Strong expertise in Information Security Risk Management, including risk identification, assessment, treatment, and executive-level reporting.
Deep knowledge of Information Security Governance and Compliance, internal controls, and security frameworks.
Hands-on experience with global standards and certifications such as ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, and PCI DSS.
Strong communication skills to translate technical risks into business impacts for various audiences.
Proven track record in managing audits, assessments, and external regulatory demands.
Analytical mindset with a business-oriented approach connecting security decisions and compliance requirements to strategic goals.
Advanced English proficiency for interacting with international stakeholders.
Nice to Have
Advanced certifications such as ISO/IEC 27001 Lead Auditor or Lead Implementer, CRISC, CISM, or CISSP.
Experience working in global or multicultural environments with distributed teams and international operations.
Familiarity with NIST CSF, COBIT, SOX, or third-party risk management programs.
Knowledge of cloud security standards like AWS, GCP, and Azure alongside secure development practices.
Hands-on experience with awareness platforms like KnowBe4, Wombat, or MetaCompliance and phishing simulation tools.
Experience presenting security and risk topics to executive committees, boards, or senior leadership forums.
Previous involvement in security incident response, coordination, and post-incident reviews.
Hands-on experience using Artificial Intelligence or Machine Learning to automate governance processes and enhance risk analysis.
Skills and Tools
AWS, GCP, Azure
ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, PCI DSS
Risk management frameworks and compliance metrics
Awareness platforms and phishing simulation tools
Salary and Benefits
WAVES Program: Annual performance-based bonuses.
Meal and Food Allowance: Credit provided on a flexible benefits card.
EBANX Education: Financial support for undergraduate, graduate, and MBA programs.
EBANX Skills: Dedicated budget for workshops, courses, and certifications.
Language Classes: Spanish, English, and Portuguese lessons.
EBANX Health: Comprehensive medical and dental plans fully covered for employees, with dependent subsidies.
EBANX Family: Childcare assistance, extended parental leave, and support programs.
Fully paid Life Insurance.
Transportation assistance via parking support or transportation vouchers.
EBANX Flexible: Birthday day off, semi-flexible working hours, and year-end recess between Christmas and New Year.
EBANX Play and Blue Club: Access to Wellhub, e-Sports, local partnerships, and exclusive discounts.
About the Company
EBANX is a unicorn-status, AI-powered fintech operating across 29 countries, connecting leading global companies to more than 1 billion consumers through cross-border payment solutions. The organization builds innovative and inclusive technology solutions with a focus on clarity, ambition, and real-world impact.
How to Apply
Interested candidates should submit their application by visiting the official EBANX careers page.
