Information Security Manager

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Oversee Bemobi’s Information Security initiatives.

• Develop a protection strategy for autonomous systems and AI, addressing autonomy risks, management of agents as non-human identities, and governance of the supply chain.

• Enhance the Security Operations Center (SOC) detection and response capabilities with AI-driven workflows for triage, enrichment, and investigation, while ensuring a human-in-the-loop approach for critical actions.

• Implement access controls for both human and non-human users across distributed and cloud infrastructures.

• Guarantee adherence to Brazil’s LGPD, PCI DSS, and regulatory standards for the telecommunications, utilities, healthcare, and education sectors in Brazil, Chile, and Mexico.

• Build and develop the InfoSec team, serving as a strategic partner to Engineering, Product, and Data from the design phase onward (Security by Design).

• Convert technical risks into business insights for leadership and clients.

• Manage business continuity and incident response plans and facilitate communication with customers and regulators in a high-availability payments environment.

⛳️ Requirements

• Proven experience leading information security in high-stakes environments such as payments, fintech, large-scale SaaS, or regulated sectors.

• In-depth knowledge of cloud security (AWS and/or Azure), DevSecOps, zero-trust architecture, identity and access management, and application and API security.

• Practical knowledge of vulnerabilities and attacks that target AI systems, including direct and indirect prompt injection, context exposure, and autonomy risks.

• Capability to develop security programs that include policies, threat modeling, red teaming, risk metrics, and multi-year roadmaps.

• Strategic partner approach when collaborating with Engineering, Product, Data, CISOs, and technical teams at leading clients.

• Familiarity with PCI DSS 4.0, ISO/IEC 42001, or established AI governance programs (preferred).

• Experience in model and agent red teaming or security assessments of production LLM architectures (preferred).

• Regional operational experience in Latin America (preferred).

• CISSP, CISM, CCSP, or equivalent certifications (preferred).

• Proficient in intermediate or advanced Spanish (preferred).

• Proficient in intermediate or advanced English (preferred).

🏝️ Benefits

• Bradesco National Network Health Plan—coverage extended to dependents with no per-beneficiary deduction.

• Bradesco Dental Plan—optional.

• Flexible meal and food allowance (VR/VA)—maintained during vacation.

• Profit-sharing plan.

• Wellhub or TotalPass.

• Birthday day off.

• Home office allowance.

• Transportation allowance (VT) as needed—subject to the legally permitted deduction.

• Zurich Life Insurance.

• Free access to all our products—AppsClub, Clube de Descontos, Truecaller, BTFit, and Busuu.

• Access to internal training through digital platforms.

• Internal employee recognition program—BeInspired.