RecargaPay
RecargaPay
RecargaPay is a Brazilian payments and digital finance company offering a single platform for everyday transactions and financial services. Customers can pay bills, top up mobile phones and transit cards, buy gift cards, and make Pix payments with a credit card. The platform also includes a digital wallet, cashback, and small loans. For businesses, RecargaPay provides business accounts, payment processing, and marketing services. Founded in 2010, the company works across consumer finance and business payments.

Senior Security Governance Analyst — Brazil (Remote)

Lead security governance for RecargaPay’s digital payments and credit business, maintaining ISO 27001, ISO 22301, and PCI DSS certifications. Manage GRC, regulatory compliance, audits, third-party risk, and business continuity.

Apraksts

  • Maintain ISO 27001, ISO 22301, and PCI DSS certifications by managing annual scope, controls, evidence, certification audits, and nonconformities.
  • Map requirements from CMN Resolution 4,893 and BCB Resolution 85 to controls, track regulatory changes, and report gaps and action plans to leadership.
  • Manage the Information Security Management System, including risk, metrics, management reviews, internal audits, and continual improvement.
  • Develop and maintain security policies, standards, and procedures, with defined review cycles and effective adoption across teams.
  • Assess suppliers, partners, and acquisitions through security due diligence, criticality ratings, questionnaire and evidence reviews, and ongoing third-party risk monitoring.
  • Manage business continuity, including business impact analyses, continuity and recovery plans, and regular tests and exercises with responsible teams.
  • Plan and deliver security awareness and engagement programs, including training, campaigns, and effectiveness metrics.
  • Support internal and external audits by coordinating requests, evidence, and responses, and tracking findings through closure.

Prasības

  • Senior-level experience in information security Governance, Risk, and Compliance (GRC), preferably in fintech, payments, or another regulated financial sector.
  • Hands-on experience maintaining an ISO 27001-aligned Information Security Management System and supporting certification, including certification audit cycles.
  • Strong knowledge of PCI DSS requirements and experience preparing evidence and supporting assessments.
  • Knowledge of Brazilian financial-sector cybersecurity and continuity regulations, including CMN Resolution 4,893 and BCB Resolution 85.
  • Experience managing third-party risk, including assessing suppliers and partners according to their criticality.
  • Experience supporting internal and external audits and working directly with auditors and regulators.
  • Preferred: experience with ISO 22301 and business continuity management, including business impact analyses, plans, and testing.
  • Preferred: knowledge of SOX and IT general controls (ITGC).
  • Preferred: certifications such as ISO 27001 Lead Implementer or Auditor, ISO 22301 Lead Implementer or Auditor, CISA, CISM, CRISC, or PCI ISA.
  • Preferred: experience with GRC tools and security awareness programs.
  • Fluent Portuguese and technical English for reading and writing documentation.

Priekšrocības

  • Competitive, market-aligned salary.
  • Remote work from anywhere.
  • Monthly home office allowance deposited in the RecargaPay app.
  • Health and dental plans with no co-pay.
  • Life insurance.
  • Flexible meal allowance through Flash.
  • TotalPass membership.
  • Competitive, market-aligned salary.
  • Remote work from anywhere.
  • Monthly home office allowance deposited in the RecargaPay app.
  • Health and dental plans with no co-pay.
  • Life insurance.
  • Flexible meal allowance through Flash.
  • TotalPass membership.

Saistītās vakances

RecruitGo

Remote Executive Assistant, Outreach and Marketing — Philippines

RecruitGo

Handle administrative support, CRM, outreach, and marketing for RecruitGo, an Employer of Record serving global clients with talent from emerging markets. Support two UK-facing clients with day-to-day administration and creative campaigns.

Atvērt