Information Security Manager
BVNK helps businesses integrate stablecoins into payment flows by providing enterprise-grade infrastructure for cross-border transactions.
Funding history
Projects
About BVNK
BVNK offers a licensed payments platform that bridges traditional payment rails with blockchain networks. Its APIs and dashboard let fintechs, marketplaces and other enterprises open virtual accounts, accept and send stablecoin payments, automate FX and orchestrate multi-rail transactions while meeting compliance requirements.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will adapt and implement information-security risk and ICT control frameworks for Brazilian regulatory compliance. You will assess risks, maintain risk registers, develop controls and indicators, support audits, investigate incidents, update security policies, and produce security documentation for internal stakeholders.
Requirements
- Bachelor’s degree in Business, Information Technology, Information Security, a related field, or equivalent experience
- Experience in operational risk management, IT risk, IT audit, or information-security governance
- Knowledge of Brazilian financial-sector information-security regulations
- Ability to develop, implement, and maintain operational-risk frameworks
- Knowledge of security controls and GRC principles
- Analytical and problem-solving skills
- Collaboration and communication skills
- Proficiency with GRC tools and platforms
Responsibilities
- Modify and implement global information-security operational-risk and ICT control frameworks for Brazilian VASP licensing
- Coordinate with legal representatives, external counsel, and regulatory authorities
- Create, implement, monitor, and report on technical security controls
- Maintain the information-security operational-risk register
- Conduct ICT risk assessments across business processes, systems, and applications
- Integrate ICT risk controls with business process owners
- Monitor IT-related fraud controls and privileged-access safeguards
- Support internal and external audits and collect audit evidence
- Design and monitor security KRIs and KPIs
- Facilitate security-control self-assessments
- Investigate fraud cases, security incidents, and privacy violations
- Review client processes and tools for security gaps
- Develop and update security-related policies and documentation
Benefits
- Flexible working hours
- Hybrid and remote working policy
- Flexible holiday approach
- Opportunities to travel to offices worldwide
