IT and Security Officer

Skills

About the Role

You will serve as the statutory officer responsible for cybersecurity governance and reporting to the Central Bank of Brazil. You will design and enforce security and IT-governance policies, oversee incident response, assess cloud and vendor risks, report cyber risks to leadership, direct security awareness programs, and lead responses to audits and regulatory examinations.

Requirements

• 3 or more years in information security, GRC, or security leadership managing frameworks and policies
• 3 to 5 or more years of hands-on technical experience in systems administration, network engineering, software engineering, DevOps, or IT support
• Deep knowledge of Central Bank of Brazil technology requirements, including Resolutions BCB 85/2021 and 520/2025
• Based in Brazil and legally eligible for appointment as a Diretor Estatutário
• Experience in a regulated financial institution, payment institution, or fintech
• Technical fluency to evaluate architectures, challenge security engineers, and audit vendor deliverables
• Professional fluency in Portuguese and English

Responsibilities

• Serve as the statutory officer responsible for cybersecurity policy, cyber risk management, and reporting to the Central Bank of Brazil
• Design, implement, and enforce information-security and IT-governance policies
• Oversee cyber-incident detection, response, crisis communication, disclosure, containment, and remediation
• Evaluate and monitor security and compliance controls for technology partners, SaaS vendors, and cloud providers
• Monitor risk indicators, assess vulnerabilities and threats, and report to the executive committee and board
• Direct security training programs and phishing simulations across Brazilian operations
• Lead responses to internal, external, and regulatory IT audits