Information Security Governance Manager
About the job
- Proven experience leading teams, with the ability to motivate, coach, and develop people.
- Strong expertise in Information Security Risk Management, including risk identification, assessment, prioritization, treatment, and executive-level reporting.
- Deep knowledge of Information Security Governance and Compliance, including risk management, internal controls, and security frameworks.
- Hands-on experience with global standards and certifications such as ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, and PCI DSS.
- Ability to translate technical risks into business impacts for technical and executive audiences.
- Proven track record managing audits, assessments, and external regulatory demands.
- Analytical, business-oriented approach connecting security decisions, risk exposure, and compliance requirements with strategic goals.
- Experience designing and running awareness programs intended to shift organizational culture.
- Proactive approach to leveraging AI and automation to optimize processes, reduce operational overhead, and enhance operational effectiveness.
- Advanced English proficiency for interaction with international stakeholders.
- Lead and develop an Information Security team focused on Risk Management and Security Governance.
- Drive the identification, assessment, prioritization, and treatment of information security risks, and communicate risk exposure to senior leadership.
- Oversee implementation, maintenance, and continuous improvement of compliance programs and certifications, including ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, and PCI DSS.
- Define and maintain the Information Security governance framework, including policies, standards, procedures, and control oversight.
- Coordinate internal and external audits, security assessments, remediation, and risk treatment plans.
- Define, monitor, and report security KPIs, KRIs, and program effectiveness metrics, providing actionable insights to business and executive stakeholders.
- Drive the security awareness and culture strategy through training programs, phishing simulations, targeted campaigns, and employee engagement initiatives.
- Partner with Legal, Risk, HR, Engineering, Product, and Compliance teams to embed security and risk management practices into business processes and strategic initiatives.
- Ensure security requirements are incorporated into new products, services, vendors, and third-party relationships from the earliest stages of engagement.
- Report on security governance, compliance status, risk landscape, and strategic initiatives to leadership and governance forums.
- Foster accountability, continuous improvement, and security-first decision-making across the organization.
- Advanced Information Security, Risk Management, or Governance certifications such as ISO/IEC 27001 Lead Auditor or Lead Implementer, CRISC, CISM, CISSP, or similar.
- Experience working in global or multicultural environments with distributed teams and international operations.
- Familiarity with additional governance and risk frameworks such as NIST CSF, COBIT, SOX, or third-party risk management programs.
- Knowledge of cloud security standards such as AWS, GCP, or Azure, and secure development practices.
- Hands-on experience with awareness platforms such as KnowBe4, Wombat, or MetaCompliance, and phishing simulation tools.
- Experience presenting security and risk topics to executive committees, boards, or senior leadership forums.
- Previous involvement in security incident response, including coordination and post-incident reviews.
- Experience using Artificial Intelligence or Machine Learning to automate governance processes, enhance risk analysis, streamline controls management, or improve compliance monitoring.
About the company
EBANX provides payment processing and a payment gateway that helps international merchants expand into Latin America, Africa, and South Asia by enabling local payment methods. Its platform connects global sellers with local options such as local cards, bank transfers, and cash vouchers, allowing both B2C and B2B transactions. For merchants, EBANX offers an all-in-one integration that supports various business models (including SaaS) and features like recurring payments and automated billing. Revenue comes from transaction fees and value-added services including fraud prevention and market intelligence. The company differentiates itself by focusing on emerging markets and delivering end-to-end cross-border payment support with localized payment methods, convenience, and regional coverage. Its goal is to help global merchants increase sales and market share in developing economies by simplifying cross-border payments and enabling accessible local payment options.
Company Size
501-1,000
Company Stage
Growth Equity (Venture Capital)
Total Funding
$460M
Headquarters
Curitiba, Brazil
Founded
2012
Get referred to EBANX
See people who can refer or advise you
Simplify's Take
What believers are saying
- Sept. 24, 2026 Pakistan launch adds JazzCash, Easypaisa, and Raast.
- EBANX reported 72% H1 2026 TPV growth and 48% annual TPV growth.
- Pix Automático drives 56% new users and 13% subscription gains.
What critics are saying
- Stripe, Adyen, and dLocal target the same cross-border merchants with broader balance sheets.
- EBANX depends on Brazil's Pix, UPI, and local-wallet rules that change fast.
- MAS or Bacen enforcement action halts EBANX merchant flows overnight.
What makes EBANX unique
- EBANX owns local acquiring across Apple Pay's 11 Latin American and Caribbean markets.
- Singapore headquarters and MAS MPI license anchor 2026 APAC expansion.
- Pix, UPI Autopay, and recurring wallets unify subscriptions across emerging markets.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Performance Bonus
- Professional Development Budget
- Paid Holidays