Information Security Manager

As an Information Security Manager at BVNK, you establish and maintain a robust framework for managing operational risks related to information security, with a strong emphasis on compliance with Brazilian financial regulations. You work across the organization to identify, assess, and mitigate risks across business processes, technology platforms, third-party engagements, and regulatory compliance requirements, ensuring operational resilience and alignment with the overall risk appetite and security strategy.

What you'll do

• Oversee the modification and implementation of changes to the global information security operational risk and ICT control framework required to support the application for and maintenance of the Brazilian VASP financial license under BCB Resolution 520/25
• Coordinate with local legal representatives, external counsel, and regulatory authorities including the Central Bank of Brazil to ensure information security policies and operational resilience mechanisms remain fully compliant with Brazilian regulatory standards
• Oversee the creation of necessary technical controls, their implementation and continuous operation, including reporting and monitoring
• Update and manage the information security operational risk register, ensuring accurate classification, measurement, and reporting of identified risks
• Conduct regular operational ICT risk assessments across critical business processes, IT systems, and applications to identify control weaknesses and potential impact scenarios
• Collaborate with business process owners to integrate ICT risk controls and ensure adherence to the three lines of defense model
• Integrate and monitor internal fraud controls specifically related to IT systems, processes, and privileged access, establishing necessary detection and prevention mechanisms
• Support internal and external audit processes, including collecting evidence, managing audit requests, and ensuring continuous compliance with regulatory standards
• Design, implement, and monitor key risk indicators and key performance indicators for IT security controls and processes
• Facilitate the control self-assessment process, verifying the existence and effectiveness of security controls across the organization
• Investigate and create comprehensive reports regarding fraud cases, security incidents, and privacy violations, ensuring timely follow-up on remediation measures
• Conduct operational risk reviews of client processes and tools, presenting recommendations on identified security gaps and creating initiatives for fraud prevention
• Develop new documents for security-related policies and update current policies
• Create new documents for other departments related to security or information security topics

What you bring

• A Bachelor's degree in Business, Information Technology, Information Security, or a related field, or equivalent experience
• Demonstrated experience in operational risk management, IT risk, IT audit, or information security governance roles
• Experience and deep knowledge of Brazilian regulatory standards related to information security in the financial sector
• Demonstrated ability to develop, implement, and maintain an operational risk framework, ideally within an information security context
• A strong understanding of security controls, governance, risk, and compliance (GRC) principles
• Exceptional analytical and problem-solving skills, with the ability to translate technical risks into business context
• Excellent collaboration and communication skills, capable of influencing stakeholders across technical and non-technical teams
• Proficiency in utilising GRC tools and platforms for risk and control management

Nice to have

• Professional certifications such as CRISC, CISSP, or CISM
• Experience with SOC 1 and Vanta

What we offer

• Competitive salary at every stage of your growth
• Flexible working hours with hybrid working at its core
• A flexible approach to holiday
• Opportunities to travel to our offices around the world
• An open and creative environment where you can help define the future of BVNK, its culture, and its opportunity sets
• A culture built on passionate, growth-minded people

About BVNK

BVNK is the stablecoin-powered financial stack for enterprises, now part of Mastercard. You enable businesses to build financial products, unlock new markets, and move money in seconds across 130+ countries with 40+ licenses for fiat and digital assets globally. Trusted by industry leaders like Corpay, Worldpay, Deel, and Flywire, BVNK delivers the infrastructure that makes new forms of money usable within the financial systems customers already rely on.