Senior Security Governance Analyst
About the job
- Proven senior-level experience in Information Security Governance, Risk, and Compliance (GRC), preferably in fintech, a payment institution, or a regulated financial sector.
- Practical experience maintaining an Information Security Management System (ISMS) aligned with ISO 27001 and supporting a certification, including certification audit cycles.
- Strong knowledge of PCI DSS requirements and experience preparing evidence and supporting assessments.
- Knowledge of Brazilian financial-sector regulations applicable to cybersecurity and business continuity, including CMN Resolution No. 4,893 and BCB Resolution No. 85.
- Experience managing third-party risk (TPRM), including assessing vendors and partners based on criticality.
- Experience supporting internal and external audits and working directly with auditors and regulators.
- Fluent Portuguese.
- Technical English reading and writing proficiency.
- Maintain ISO 27001 and ISO 22301 certifications and PCI DSS compliance by managing annual scoping, controls, evidence, certification audits, and remediation of nonconformities.
- Ensure compliance with CMN Resolution No. 4,893 and BCB Resolution No. 85 by mapping requirements to controls, tracking regulatory changes, and reporting gaps and action plans to leadership.
- Manage the Information Security Management System (ISMS), including risks, indicators, management reviews, internal audits, and continual improvement.
- Develop, implement, and maintain security policies, standards, and procedures with defined review cycles and effective adoption across business areas.
- Assess vendors, partners, and acquisitions through third-party risk management (TPRM), including security due diligence, criticality classification, questionnaire and evidence review, and ongoing third-party risk monitoring.
- Lead business continuity management, including business impact analysis (BIA), continuity and recovery plans, and periodic tests and exercises with responsible teams.
- Plan and execute the security engagement and awareness program, including training, campaigns, and effectiveness metrics.
- Support internal and external audits by coordinating requests, evidence, and responses, and tracking findings through resolution.
- Experience with ISO 22301 and business continuity management, including business impact analysis, plans, and tests.
- Knowledge of SOX and IT general controls (ITGC).
- Certifications such as ISO 27001 Lead Implementer or Auditor, ISO 22301 Lead Implementer or Auditor, CISA, CISM, CRISC, or PCI ISA.
- Experience with GRC tools and security awareness programs.
About the company
RecargaPay is a Brazil-based all-in-one fintech platform that enables mobile payments, bill payments, Pix transfers with a credit card, and person-to-person transfers without card machines or bank details. Its app supports purchases at merchants like iFood, Amazon, and Casas Bahias, with cashback, and also lets users buy gift cards and prepaid TV with more cashback; it also offers Prime+ for added benefits and small loans. The service differentiates itself by allowing credit-card–backed Pix payments, a broad set of merchant partnerships, generous cashback on various purchases, and licensing as a Direct Credit Society to expand lending. Its goal is to become the leading platform for payments, transfers, savings, and small credit in Brazil, expanding its user and merchant base while broadening its financial services.
Company Size
501-1,000
Company Stage
Debt Financing
Total Funding
$165.1M
Headquarters
São Paulo, Brazil
Founded
2010
Get referred to RecargaPay
See people who can refer or advise you
Simplify's Take
What believers are saying
- RecargaPay said 13 million customers and launched Titan card in January 2026.
- The company opened insurance and investment products in 2026, widening monetization.
- Remote team scale and reported profitability since 2022 support expansion without immediate capital strain.
What critics are saying
- Nubank, Mercado Pago, and banks can commoditize payments and squeeze fees quickly.
- Credit expansion brings delinquency and funding risk if Brazil's consumer downturn hits 2026.
- If Pix economics tighten, RecargaPay's fee engine loses its core growth lever.
What makes RecargaPay unique
- Brazil-native all-in-one payments platform spans Pix, bills, lending, and cashback.
- Regulatory breadth deepened after Banco Central approved its Sociedade de Crédito Direto.
- Prime+, cards, CDBs, and insurance create a sticky cross-sell ecosystem.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Life Insurance
- Meal Benefits
- Remote Work Options
- Home Office Stipend
- Wellness Program
- Gym Membership