RecargaPay
RecargaPay
201 – 500 Darbuotojai
KonsultavimasLogistikaRinkodara
RecargaPay is a Brazilian payments and digital finance company offering a single platform for everyday transactions and financial services. Customers can pay bills, top up mobile phones and transit cards, buy gift cards, and make Pix payments with a credit card. The platform also includes a digital wallet, cashback, and small loans. For businesses, RecargaPay provides business accounts, payment processing, and marketing services. Founded in 2010, the company works across consumer finance and business payments.

Senior Security Governance Analyst — Brazil (Remote)

Lead security governance for RecargaPay’s digital payments and credit business, maintaining ISO 27001, ISO 22301, and PCI DSS certifications. Manage GRC, regulatory compliance, audits, third-party risk, and business continuity.

Aprašymas

  • Maintain ISO 27001, ISO 22301, and PCI DSS certifications by managing annual scope, controls, evidence, certification audits, and nonconformities.
  • Map requirements from CMN Resolution 4,893 and BCB Resolution 85 to controls, track regulatory changes, and report gaps and action plans to leadership.
  • Manage the Information Security Management System, including risk, metrics, management reviews, internal audits, and continual improvement.
  • Develop and maintain security policies, standards, and procedures, with defined review cycles and effective adoption across teams.
  • Assess suppliers, partners, and acquisitions through security due diligence, criticality ratings, questionnaire and evidence reviews, and ongoing third-party risk monitoring.
  • Manage business continuity, including business impact analyses, continuity and recovery plans, and regular tests and exercises with responsible teams.
  • Plan and deliver security awareness and engagement programs, including training, campaigns, and effectiveness metrics.
  • Support internal and external audits by coordinating requests, evidence, and responses, and tracking findings through closure.

Reikalavimai

  • Senior-level experience in information security Governance, Risk, and Compliance (GRC), preferably in fintech, payments, or another regulated financial sector.
  • Hands-on experience maintaining an ISO 27001-aligned Information Security Management System and supporting certification, including certification audit cycles.
  • Strong knowledge of PCI DSS requirements and experience preparing evidence and supporting assessments.
  • Knowledge of Brazilian financial-sector cybersecurity and continuity regulations, including CMN Resolution 4,893 and BCB Resolution 85.
  • Experience managing third-party risk, including assessing suppliers and partners according to their criticality.
  • Experience supporting internal and external audits and working directly with auditors and regulators.
  • Preferred: experience with ISO 22301 and business continuity management, including business impact analyses, plans, and testing.
  • Preferred: knowledge of SOX and IT general controls (ITGC).
  • Preferred: certifications such as ISO 27001 Lead Implementer or Auditor, ISO 22301 Lead Implementer or Auditor, CISA, CISM, CRISC, or PCI ISA.
  • Preferred: experience with GRC tools and security awareness programs.
  • Fluent Portuguese and technical English for reading and writing documentation.

Privalumai

  • Competitive, market-aligned salary.
  • Remote work from anywhere.
  • Monthly home office allowance deposited in the RecargaPay app.
  • Health and dental plans with no co-pay.
  • Life insurance.
  • Flexible meal allowance through Flash.
  • TotalPass membership.
  • Competitive, market-aligned salary.
  • Remote work from anywhere.
  • Monthly home office allowance deposited in the RecargaPay app.
  • Health and dental plans with no co-pay.
  • Life insurance.
  • Flexible meal allowance through Flash.
  • TotalPass membership.

Susiję darbai

Terumo Medical Corporation

Region Manager, Terumo Interventional Systems Sales

Terumo Medical Corporation

Lead medical device sales across a North Central New Jersey region, managing field teams and hospital relationships. Drive regional revenue, sales performance, and compliant promotion of Terumo Interventional Systems products.

Atidaryti