EBANX

Payment gateway for cross-border local payments

Information Security Governance Manager

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours

Full-timeCuritiba, State of Paraná, BrazilIn-person

About the Job

Requirements

Proven experience leading teams, with the ability to motivate, coach, and develop people.
Strong expertise in Information Security Risk Management, including risk identification, assessment, prioritization, treatment, and executive-level reporting.
Deep knowledge of Information Security Governance and Compliance, including risk management, internal controls, and security frameworks.
Hands-on experience with global standards and certifications such as ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, and PCI DSS.
Ability to translate technical risks into business impacts for technical and executive audiences.
Proven track record managing audits, assessments, and external regulatory demands.
Analytical, business-oriented approach connecting security decisions, risk exposure, and compliance requirements with strategic goals.
Experience designing and running awareness programs intended to shift organizational culture.
Proactive approach to leveraging AI and automation to optimize processes, reduce operational overhead, and enhance operational effectiveness.
Advanced English proficiency for interaction with international stakeholders.

Responsibilities

Lead and develop an Information Security team focused on Risk Management and Security Governance.
Drive the identification, assessment, prioritization, and treatment of information security risks, and communicate risk exposure to senior leadership.
Oversee implementation, maintenance, and continuous improvement of compliance programs and certifications, including ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, and PCI DSS.
Define and maintain the Information Security governance framework, including policies, standards, procedures, and control oversight.
Coordinate internal and external audits, security assessments, remediation, and risk treatment plans.
Define, monitor, and report security KPIs, KRIs, and program effectiveness metrics, providing actionable insights to business and executive stakeholders.
Drive the security awareness and culture strategy through training programs, phishing simulations, targeted campaigns, and employee engagement initiatives.
Partner with Legal, Risk, HR, Engineering, Product, and Compliance teams to embed security and risk management practices into business processes and strategic initiatives.
Ensure security requirements are incorporated into new products, services, vendors, and third-party relationships from the earliest stages of engagement.
Report on security governance, compliance status, risk landscape, and strategic initiatives to leadership and governance forums.
Foster accountability, continuous improvement, and security-first decision-making across the organization.

Desired Qualifications

Advanced Information Security, Risk Management, or Governance certifications such as ISO/IEC 27001 Lead Auditor or Lead Implementer, CRISC, CISM, CISSP, or similar.
Experience working in global or multicultural environments with distributed teams and international operations.
Familiarity with additional governance and risk frameworks such as NIST CSF, COBIT, SOX, or third-party risk management programs.
Knowledge of cloud security standards such as AWS, GCP, or Azure, and secure development practices.
Hands-on experience with awareness platforms such as KnowBe4, Wombat, or MetaCompliance, and phishing simulation tools.
Experience presenting security and risk topics to executive committees, boards, or senior leadership forums.
Previous involvement in security incident response, including coordination and post-incident reviews.
Experience using Artificial Intelligence or Machine Learning to automate governance processes, enhance risk analysis, streamline controls management, or improve compliance monitoring.

At EBANX, you’ll help expand access to payments and technology in some of the world’s most dynamic markets. We’re a unicorn-status fintech, AI-powered, and scaling fast across 29 countries and counting.

Our platform connects leading global companies to more than 1 billion consumers, enabling seamless cross-border payments where it matters most. We build with purpose, move with speed, and create solutions that are both innovative and inclusive.

If you’re looking to be part of a company that’s transforming the future of payments with clarity, ambition, and real-world impact — we’d love to meet you.

Your day-to-day impact:

Lead and develop a high-performing Information Security team focused on Risk Management and Security Governance;
Drive the identification, assessment, prioritization, and treatment of information security risks, ensuring clear visibility and effective communication of risk exposure to senior leadership;
Oversee the implementation, maintenance, and continuous improvement of compliance programs and certifications, including ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, and PCI DSS;
Define and maintain the Information Security governance framework, including policies, standards, procedures, and control oversight;
Coordinate internal and external audits, security assessments, and the execution of remediation and risk treatment plans;
Define, monitor, and report security KPIs, KRIs, and program effectiveness metrics, providing actionable insights to business and executive stakeholders;
Drive the organization's security awareness and culture strategy through training programs, phishing simulations, targeted campaigns, and employee engagement initiatives;
Partner with cross-functional teams (Legal, Risk, HR, Engineering, Product, and Compliance) to embed security and risk management practices into business processes and strategic initiatives;
Ensure security requirements are incorporated into new products, services, vendors, and third-party relationships from the earliest stages of engagement;
Provide regular reporting on security governance, compliance status, risk landscape, and strategic initiatives to leadership and relevant governance forums;
Foster a culture of accountability, continuous improvement, and security-first decision-making across the organization.

Must-haves to shine in this role:

Proven experience leading teams, with the ability to motivate, coach, and develop people;
Strong expertise in Information Security Risk Management, including risk identification, assessment, prioritization, treatment, and executive-level reporting;
Deep knowledge of Information Security Governance and Compliance, including risk management, internal controls, and security frameworks;
Hands-on experience with global standards and certifications such as ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, and PCI DSS;
Strong communication skills, with the ability to translate technical risks into business impacts for both technical and executive audiences;
Proven track record managing audits, assessments, and external regulatory demands;
Analytical mindset with a business-oriented approach, connecting security decisions, risk exposure, and compliance requirements with strategic goals;
Experience designing and running awareness programs that go beyond checklists and truly shift culture;
Passion for innovation and AI-driven efficiency, with a proactive approach to leveraging AI and automation to optimize processes, reduce operational overhead, and enhance operational effectiveness;
Advanced English — you’ll often interact with international stakeholders.

Bonus points if you have:

Advanced certifications in Information Security, Risk Management, or Governance, such as ISO/IEC 27001 Lead Auditor/Lead Implementer, CRISC, CISM, CISSP, or similar;
Experience working in global or multicultural environments, with distributed teams and international operations;
Familiarity with additional governance and risk frameworks such as NIST CSF, COBIT, SOX, or third-party risk management programs;
Knowledge of cloud security standards (e.g., AWS, GCP, Azure) and secure development practices;
Hands-on experience with awareness platforms (e.g., KnowBe4, Wombat, MetaCompliance) and phishing simulation tools;
Experience presenting security and risk topics to executive committees, boards, or senior leadership forums;
Previous involvement in security incident response, including coordination and post-incident reviews;
Passion for building a security culture, storytelling, and engaging people in non-technical areas;
Hands-on experience using Artificial Intelligence (AI) or Machine Learning to automate governance processes, enhance risk analysis, streamline controls management, or improve compliance monitoring.

EBANX offers:

WAVES Program: Annual bonuses based on the company’s performance.
Meal/Food Allowance: Credit provided on a flexible benefits card.
EBANX Education: Financial support for undergraduate, graduate, and MBA programs to support your professional growth.
EBANX Skills: Budget dedicated to workshops, courses, and certifications to encourage your continuous development.
Language Classes: Spanish, English, and Portuguese lessons for your personal and professional development.
EBANX Health: Comprehensive medical and dental plans fully covered for the employee, plus subsidies for dependents to take care of your and your family’s well-being.
EBANX Family: Childcare assistance, extended parental leave for caregivers, and support programs for pregnant employees and children.
Life Insurance: Fully paid by EBANX.
Transportation: Parking assistance or transportation vouchers, depending on your needs.
EBANX Flexible: A special day off on your birthday, semi-flexible working hours (8 hours/day, Monday to Friday), and year-end recess between Christmas and New Year’s without affecting your vacation days.
EBANX Play: Well-being program including access to Wellhub, e-Sports, and partnerships with SESC.
Blue Club: Exclusive discounts at bakeries, restaurants, stores, courses, and more.

About the Company

EBANX

Payment gateway for cross-border local payments

EBANX provides payment processing and a payment gateway that helps international merchants expand into Latin America, Africa, and South Asia by enabling local payment methods. Its platform connects global sellers with local options such as local cards, bank transfers, and cash vouchers, allowing both B2C and B2B transactions. For merchants, EBANX offers an all-in-one integration that supports various business models (including SaaS) and features like recurring payments and automated billing. Revenue comes from transaction fees and value-added services including fraud prevention and market intelligence. The company differentiates itself by focusing on emerging markets and delivering end-to-end cross-border payment support with localized payment methods, convenience, and regional coverage. Its goal is to help global merchants increase sales and market share in developing economies by simplifying cross-border payments and enabling accessible local payment options.

Company size: 501-1,000
Company stage: Growth Equity (Venture Capital)
Total funding: $460M
Headquarters: Curitiba, Brazil
Founded: 2012

Recently Posted Jobs

Explore more opportunities at EBANX

See more jobs