Chief Information Security Officer, CISO

RecargaPay

. Define, implement, and continuously evolve the corporate Information Security strategy.

Posted 9/15/2026full-timeRemote • BrazilLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Security strategy, governance, and risk management, with a strong focus on compliance with industry standards such as ISO 27001 and PCI DSS. Proven ability to lead security initiatives across cloud environments and embed security practices throughout the software development lifecycle.

Highest-signal resume keywords

Information Security StrategyGovernance Risk ManagementCloud Security (AWS)DevSecOps ImplementationISO 27001 Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber Risk AssessmentIncident ResponseApplication SecurityThreat ModelingSASTDASTSecurity Operations Center (SOC)Security Information and Event Management (SIEM)EDRAPI Security

Soft Skills

Excellent CommunicationInfluencing DecisionsTeam BuildingStakeholder ManagementCultural Awareness

Tools & Technologies

Cloud EnvironmentsZero Trust ModelsBusiness Continuity PlansDisaster Recovery PlansThreat Intelligence

Certifications & Qualifications

CISSPCISM

Industry Keywords

FintechDigital BanksCentral Bank of BrazilOpen FinanceFraud Prevention

Tech Stack

Tools & technologies

AWSCloudCyber SecurityMicroservices

About the role

Key responsibilities & impact

Define, implement, and continuously evolve the corporate Information Security strategy.
Lead and develop Security Engineering, SOC, GRC, Application Security, Blue Team, and Red Team functions.
Manage Governance and Risk Management, including cyber risk assessments and mitigation tracking.
Ensure compliance with BACEN Resolution No. 4,893, LGPD, PCI DSS, ISO 27001, ISO 22301, and Open Finance requirements.
Oversee SOC capabilities for incident detection, response, containment, and recovery.
Lead security initiatives across cloud environments, Zero Trust models, and critical infrastructure.
Embed DevSecOps, SAST, DAST, threat modeling, and secure code review across the software development lifecycle.
Communicate cybersecurity risks to the Board and C-level executives.
Manage relationships with regulators, auditors, certification bodies, and strategic stakeholders.
Design and maintain security awareness and culture programs.
Evaluate, select, and manage security vendors and strategic partners.
Develop, test, and enhance Business Continuity and Disaster Recovery Plans.

Requirements

What you’ll need

Experience in Information Security and in executive or senior leadership positions.
Experience in fintechs, digital banks, financial institutions, or companies regulated by the Central Bank of Brazil.
Bachelor's degree in Computer Science, Engineering, Information Systems, or related fields.
Proficiency in cloud security, especially AWS, and in highly available distributed architectures.
Strong knowledge of ISO 27001, NIST Cybersecurity Framework, CIS Controls, and MITRE ATT&CK.
Hands-on experience with SOC operations, SIEM platforms, EDR, Threat Intelligence, and incident response.
Strong understanding of DevSecOps, application security, SAST, DAST, and threat modeling.
Technical capability to participate in architectural discussions with Engineering and Platform teams.
Experience securing APIs, microservices, and mission-critical digital ecosystems.
Understanding of Generative AI risks, including Shadow AI, sensitive information leakage in LLMs, and prompt engineering-based attacks.
Ability to define policies, controls, and guidelines for secure AI tool use.
Familiarity with AI/ML applications for fraud detection, behavioral analytics, and SOAR.
Excellent communication with Boards, Executive Committees, auditors, regulators, and risk committees.
Ability to influence decisions in matrix organizations and multidisciplinary squads.
Proven track record building, developing, and retaining high-performing technical teams.
Ability to balance security rigor, regulatory compliance, agility, and business growth.
Practical familiarity with core financial domains such as lending, payments, credit cards, open finance, fraud prevention, merchant acquiring, or investment services is desirable.
CISSP and CISM are preferred certifications.

Benefits

Comp & perks

Competitive and market-aligned salary.
Remote work — wherever you are, you’re part of the team!
Home office allowance through a monthly deposit in the RecargaPay app.
Health and dental plans with no co-pay.
Life insurance.
Flexible meal allowance (via Flash).
TotalPass membership to take care of your health.