Information Security Manager

Remotefull timeRemote

Apply on Employer Site

senior

H1B: no

Bvnk Information Security Manager at Bvnk responsible for managing operational risks related to information security with emphasis on compliance with Brazilian financial regulations. Oversees modification and implementation of changes to global security frameworks to support Brazilian VASP financial license.

Responsibilities

CNBC World's Top Fintech Companies (2026)
FXC Intelligence Top 100 Cross-border Payment Companies (2026)
Newsweek's The Top 100 Global Most Loved Workplaces (three years running, most recently 2025)
LinkedIn as one of the Top 20 Startups in the UK (2025)
Oversee the modification and implementation of changes to the global information security operational risk and ICT control framework required to support the application for and maintenance of the Brazilian VASP financial license under BCB Resolution 520/25.
Coordinate with local legal representatives, external counsel, and regulatory authorities (including the Central Bank of Brazil) to ensure information security policies and operational resilience mechanisms remain fully compliant with Brazilian regulatory standards.
Oversee the creation of the necessary technical controls, their implementation and continuous operation, including reporting and monitoring.
Update and manage the information security operational risk register, ensuring accurate classification, measurement, and reporting of identified risks.
Conduct regular operational ICT risk assessments across critical business processes, IT systems, and applications to identify control weaknesses and potential impact scenarios.
Collaborate with business process owners to integrate ICT risk controls and ensure adherence to the 'three lines of defense' model.
Integrate and monitor internal fraud controls specifically related to IT systems, processes, and privileged access, establishing necessary detection and prevention mechanisms.
Support internal and external audit processes, including collecting evidence, managing audit requests, and ensuring continuous compliance with regulatory standards.

Qualification

Bachelor’s degree in BusinessDemonstrated ability to develop

Required

Create new documents for other departments related to Security or information security topics.
Bachelor’s degree in Business, Information Technology, Information Security, or a related field, or equivalent experience.
Demonstrated experience in operational risk management, IT risk, IT audit, or information security governance roles.
Professional certifications such as CRISC, CISSP, CISM, or similar are highly desirable.
Experience with SOC 1 and Vanta will be considered a strong plus.
Experience and deep knowledge of the Brazilian regulatory standards related to information security in the financial sector.
Demonstrated ability to develop, implement, and maintain an operational risk framework, ideally within an information security context.
Strong understanding of security controls, governance, risk, and compliance (GRC) principles.
Exceptional analytical and problem-solving skills, with a focus on translating technical risks into business context.
Excellent collaboration and communication skills, capable of influencing stakeholders across technical and non-technical teams.
Proficiency in utilising GRC tools and platforms for risk and control management.
Fair and competitive salary at every stage of your growth