EBANX

Information Security Governance Manager

Curitiba | On-site · Work style not stated

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

EmployerEBANX
LocationCuritiba | On-site
Work styleWork style not stated
Employer posted3 months ago

At EBANX, you’ll help expand access to payments and technology in some of the world’s most dynamic markets. We’re a unicorn-status fintech, AI-powered, and scaling fast across 29 countries and counting.

Our platform connects leading global companies to more than 1 billion consumers, enabling seamless cross-border payments where it matters most. We build with purpose, move with speed, and create solutions that are both innovative and inclusive.

If you’re looking to be part of a company that’s transforming the future of payments with clarity, ambition, and real-world impact — we’d love to meet you.

Your day-to-day impact:

Lead and develop a high-performing Information Security team focused on Risk Management and Security Governance;
Drive the identification, assessment, prioritization, and treatment of information security risks, ensuring clear visibility and effective communication of risk exposure to senior leadership;
Oversee the implementation, maintenance, and continuous improvement of compliance programs and certifications, including ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, and PCI DSS;
Define and maintain the Information Security governance framework, including policies, standards, procedures, and control oversight;
Coordinate internal and external audits, security assessments, and the execution of remediation and risk treatment plans;
Define, monitor, and report security KPIs, KRIs, and program effectiveness metrics, providing actionable insights to business and executive stakeholders;
Drive the organization's security awareness and culture strategy through training programs, phishing simulations, targeted campaigns, and employee engagement initiatives;
Partner with cross-functional teams (Legal, Risk, HR, Engineering, Product, and Compliance) to embed security and risk management practices into business processes and strategic initiatives;
Ensure security requirements are incorporated into new products, services, vendors, and third-party relationships from the earliest stages of engagement;
Provide regular reporting on security governance, compliance status, risk landscape, and strategic initiatives to leadership and relevant governance forums;
Foster a culture of accountability, continuous improvement, and security-first decision-making across the organization.

Show full description

Must-haves to shine in this role:

Proven experience leading teams, with the ability to motivate, coach, and develop people;
Strong expertise in Information Security Risk Management, including risk identification, assessment, prioritization, treatment, and executive-level reporting;
Deep knowledge of Information Security Governance and Compliance, including risk management, internal controls, and security frameworks;
Hands-on experience with global standards and certifications such as ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, and PCI DSS;
Strong communication skills, with the ability to translate technical risks into business impacts for both technical and executive audiences;
Proven track record managing audits, assessments, and external regulatory demands;
Analytical mindset with a business-oriented approach, connecting security decisions, risk exposure, and compliance requirements with strategic goals;
Experience designing and running awareness programs that go beyond checklists and truly shift culture;
Passion for innovation and AI-driven efficiency, with a proactive approach to leveraging AI and automation to optimize processes, reduce operational overhead, and enhance operational effectiveness;
Advanced English — you’ll often interact with international stakeholders.

Bonus points if you have:

Advanced certifications in Information Security, Risk Management, or Governance, such as ISO/IEC 27001 Lead Auditor/Lead Implementer, CRISC, CISM, CISSP, or similar;
Experience working in global or multicultural environments, with distributed teams and international operations;
Familiarity with additional governance and risk frameworks such as NIST CSF, COBIT, SOX, or third-party risk management programs;
Knowledge of cloud security standards (e.g., AWS, GCP, Azure) and secure development practices;
Hands-on experience with awareness platforms (e.g., KnowBe4, Wombat, MetaCompliance) and phishing simulation tools;
Experience presenting security and risk topics to executive committees, boards, or senior leadership forums;
Previous involvement in security incident response, including coordination and post-incident reviews;
Passion for building a security culture, storytelling, and engaging people in non-technical areas;
Hands-on experience using Artificial Intelligence (AI) or Machine Learning to automate governance processes, enhance risk analysis, streamline controls management, or improve compliance monitoring.

EBANX offers:

WAVES Program: Annual bonuses based on the company’s performance.

Meal/Food Allowance: Credit provided on a flexible benefits card.

EBANX Education: Financial support for undergraduate, graduate, and MBA programs to support your professional growth.

EBANX Skills: Budget dedicated to workshops, courses, and certifications to encourage your continuous development.

Language Classes: Spanish, English, and Portuguese lessons for your personal and professional development.

EBANX Health: Comprehensive medical and dental plans fully covered for the employee, plus subsidies for dependents to take care of your and your family’s well-being.

EBANX Family: Childcare assistance, extended parental leave for caregivers, and support programs for pregnant employees and children.

Life Insurance: Fully paid by EBANX.

Transportation: Parking assistance or transportation vouchers, depending on your needs.

EBANX Flexible: A special day off on your birthday, semi-flexible working hours (8 hours/day, Monday to Friday), and year-end recess between Christmas and New Year’s without affecting your vacation days.

EBANX Play: Well-being program including access to Wellhub, e-Sports, and partnerships with SESC.

Blue Club: Exclusive discounts at bakeries, restaurants, stores, courses, and more.

See how well you match this job Apply on the employer’s site ↗

Check your resume against this job Free, no sign-up. Nothing you paste is stored.

Staying safe while you apply

Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
Prepare honestly.
Build interview stories and application drafts from your own evidence.
Keep track.
Save the role and record your own application status and follow-ups.

Create a free workspace or log in.