Information Security Governance Manager
Read straight from EBANX's careers page, verified 2d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
LocationEBANX, Curitiba | On-site
Work modeon-site
Typefull-time
SeniorityLead
DepartmentCloud, Security & IT Ops
Company size1,001–5,000 people
PostedJun 17, 2026 · 4mo ago
Verified live2d ago
At a glanceSummarised by Seekless from the posting.
Proven experience leading teams
Strong expertise in Information Security Risk Management
Deep knowledge of Information Security Governance and Compliance
Hands-on experience with global standards and certifications such as ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, and PCI DSS
Strong communication skills
Proven track record managing audits, assessments, and external regulatory demands
Analytical mindset with a business-oriented approach
Experience designing and running awareness programs
Passion for innovation and AI-driven efficiency
Advanced English
Advanced certifications in Information Security, Risk Management, or Governance such as ISO/IEC 27001 Lead Auditor/Lead Implementer, CRISC, CISM, CISSP, or similar
Experience working in global or multicultural environments
Familiarity with additional governance and risk frameworks such as NIST CSF, COBIT, SOX, or third-party risk management programs
Knowledge of cloud security standards (e.g., AWS, GCP, Azure) and secure development practices
Hands-on experience with awareness platforms (e.g., KnowBe4, Wombat, MetaCompliance) and phishing simulation tools
Experience presenting security and risk topics to executive committees, boards, or senior leadership forums
Previous involvement in security incident response
Passion for building a security culture, storytelling, and engaging people in non-technical areas
Hands-on experience using Artificial Intelligence (AI) or Machine Learning to automate governance processes
Skills
ISO/IEC 27001
ISO/IEC 27701
ISO/IEC 27018
PCI DSS
NIST CSF
COBIT
SOX
AWS
GCP
Azure
KnowBe4
Wombat
MetaCompliance
Artificial Intelligence
Machine Learning
Benefits
Bonus
Meal food allowance
Tuition reimbursement
Professional development budget
Language classes
Health insurance
Dental insurance
Childcare assistance
Parental leave
Life insurance
Transportation assistance
Birthday off
Flexible hours
Year end recess
Wellness program
Employee discounts
About the company
At EBANX, you’ll help expand access to payments and technology in some of the world’s most dynamic markets. We’re a unicorn-status fintech, AI-powered, and scaling fast across 29 countries and counting.
Our platform connects leading global companies to more than 1 billion consumers, enabling seamless cross-border payments where it matters most. We build with purpose, move with speed, and create solutions that are both innovative and inclusive.
If you’re looking to be part of a company that’s transforming the future of payments with clarity, ambition, and real-world impact — we’d love to meet you.
Your day-to-day impact:
•
Lead and develop a high-performing Information Security team focused on Risk Management and Security Governance;
•
Drive the identification, assessment, prioritization, and treatment of information security risks, ensuring clear visibility and effective communication of risk exposure to senior leadership;
•
Oversee the implementation, maintenance, and continuous improvement of compliance programs and certifications, including ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, and PCI DSS;
•
Define and maintain the Information Security governance framework, including policies, standards, procedures, and control oversight;
•
Coordinate internal and external audits, security assessments, and the execution of remediation and risk treatment plans;
•
Define, monitor, and report security KPIs, KRIs, and program effectiveness metrics, providing actionable insights to business and executive stakeholders;
•
Drive the organization’s security awareness and culture strategy through training programs, phishing simulations, targeted campaigns, and employee engagement initiatives;
•
Partner with cross-functional teams (Legal, Risk, HR, Engineering, Product, and Compliance) to embed security and risk management practices into business processes and strategic initiatives;
•
Ensure security requirements are incorporated into new products, services, vendors, and third-party relationships from the earliest stages of engagement;
•
Provide regular reporting on security governance, compliance status, risk landscape, and strategic initiatives to leadership and relevant governance forums;
•
Foster a culture of accountability, continuous improvement, and security-first decision-making across the organization.
Must-haves to shine in this role:
•
Proven experience leading teams, with the ability to motivate, coach, and develop people;
•
Strong expertise in Information Security Risk Management, including risk identification, assessment, prioritization, treatment, and executive-level reporting;
•
Deep knowledge of Information Security Governance and Compliance, including risk management, internal controls, and security frameworks;
•
Hands-on experience with global standards and certifications such as ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, and PCI DSS;
•
Strong communication skills, with the ability to translate technical risks into business impacts for both technical and executive audiences;
•
Proven track record managing audits, assessments, and external regulatory demands;
•
Analytical mindset with a business-oriented approach, connecting security decisions, risk exposure, and compliance requirements with strategic goals;
•
Experience designing and running awareness programs that go beyond checklists and truly shift culture;
•
Passion for innovation and AI-driven efficiency, with a proactive approach to leveraging AI and automation to optimize processes, reduce operational overhead, and enhance operational effectiveness;
•
Advanced English — you’ll often interact with international stakeholders.
Bonus points if you have:
•
Advanced certifications in Information Security, Risk Management, or Governance, such as ISO/IEC 27001 Lead Auditor/Lead Implementer, CRISC, CISM, CISSP, or similar;
•
Experience working in global or multicultural environments, with distributed teams and international operations;
•
Familiarity with additional governance and risk frameworks such as NIST CSF, COBIT, SOX, or third-party risk management programs;
•
Knowledge of cloud security standards (e.g., AWS, GCP, Azure) and secure development practices;
•
Hands-on experience with awareness platforms (e.g., KnowBe4, Wombat, MetaCompliance) and phishing simulation tools;
•
Experience presenting security and risk topics to executive committees, boards, or senior leadership forums;
•
Previous involvement in security incident response, including coordination and post-incident reviews;
•
Passion for building a security culture, storytelling, and engaging people in non-technical areas;
•
Hands-on experience using Artificial Intelligence (AI) or Machine Learning to automate governance processes, enhance risk analysis, streamline controls management, or improve compliance monitoring.
EBANX offers:
•
WAVES Program: Annual bonuses based on the company’s performance.
•
Meal/Food Allowance: Credit provided on a flexible benefits card.
•
EBANX Education: Financial support for undergraduate, graduate, and MBA programs to support your professional growth.
•
EBANX Skills: Budget dedicated to workshops, courses, and certifications to encourage your continuous development.
•
Language Classes: Spanish, English, and Portuguese lessons for your personal and professional development.
•
EBANX Health: Comprehensive medical and dental plans fully covered for the employee, plus subsidies for dependents to take care of your and your family’s well-being.
•
EBANX Family: Childcare assistance, extended parental leave for caregivers, and support programs for pregnant employees and children.
•
Life Insurance: Fully paid by EBANX.
•
Transportation: Parking assistance or transportation vouchers, depending on your needs.
•
EBANX Flexible: A special day off on your birthday, semi-flexible working hours (8 hours/day, Monday to Friday), and year-end recess between Christmas and New Year’s without affecting your vacation days.
•
EBANX Play: Well-being program including access to Wellhub, e-Sports, and partnerships with SESC.
•
Blue Club: Exclusive discounts at bakeries, restaurants, stores, courses, and more.
Follow us on LinkedIn and check out our Instagram to learn more about the #ebanxlife.