Staff GRC Program Manager
Ripple provides payments, custody and stablecoin solutions that help financial institutions integrate blockchain and digital assets.
Funding history
Investors
Projects
About Ripple
Ripple helps financial institutions transform global payments by providing blockchain-powered infrastructure for cross-border payments, digital asset custody, and stablecoin solutions. With it, users can enable instant settlements, reduce costs, and access new markets. The company was originally founded as OpenCoin in 2012 and rebranded to Ripple in 2015.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead local cybersecurity governance, risk, compliance, control testing, regulatory engagement, and incident-response readiness. You will gather technical evidence, oversee service providers, maintain policies and procedures, report to leadership, and collaborate with global functions on Brazil-specific security requirements.
Requirements
- 5+ years of information-security risk-management and compliance experience
- Experience with a BCB-regulated or equivalent financial institution is preferred
- Based in Brazil with Brazilian financial-services or FinTech experience
- Understanding of the BCB PSAV/SPSAV framework and LGPD
- Knowledge of ISO 27001, SOC2, NIST, and CSA Cloud Controls Matrix
- Understanding of cloud-native FinTech information-security governance
- Experience analyzing logs, configuration data, audit reports, and database queries
- Experience creating documentation, SOPs, and training content
- Experience with Jira, Confluence, Okta, AWS, Tines, and GRC platforms
- Portuguese fluency and professional English proficiency
Responsibilities
- Lead cybersecurity governance, risk management, and compliance in Brazil
- Support regulatory authorization reviews, supervisory engagements, and examinations
- Report on the information-security program and ICT risk posture
- Maintain compliance with Brazilian regulatory and security frameworks
- Map regulatory guidance to security controls
- Plan and conduct technical control testing
- Collect technical evidence for audits and assurance reviews
- Develop and localize information-security policies and procedures
- Oversee outsourced IT and security service providers
- Support data-protection security activities
- Support group-wide information-security GRC initiatives
- Provide security guidance to cross-functional teams
- Respond to customer security due-diligence requests
- Maintain GRC documentation, workflows, and evidence procedures
Benefits
- Bonuses
- Equity
- Healthcare benefits
- Retirement benefits
- Family-forming and family-support benefits
- Employee giving match
- Mobile phone stipend
- R&R days
- Wellness reimbursement
- Vacation policy
- Parental leave
- Catered lunches
- Stocked kitchens
- Team offsites and social events