




Description: It is very important that you have and/or know: * Minimum 10 years of experience working in the Information Security discipline. * Cyber risk management. * Technologies such as firewalls, IDS/IPS, EDR, proxy, WAF, NDR, SIEM, password vaults, and other security technologies. * Networks and network architecture, infrastructure, and applications. * Operating systems. * Project management methodologies. * Frameworks and methodologies such as CSA, CIS Controls, NIST CSF. * Development of strategic, tactical, and operational indicators. * Experience in: Regulated sectors. * Audits and independent assessments on Information Security topics. * Implementation of technology projects focused on Information Security. * Budgetary/financial management. * Development of strategic plans and roadmaps. * Desired certifications: PMP, CSSLP, among others. * Language: Advanced English. * Courses and specializations in project management, security technologies, and cloud environments. The role’s challenges are: * Responsible for the Information Security Engineering team, whose objective is to lead the planning and management of projects with consistent delivery that efficiently and effectively meets expectations regarding time, cost, and quality, supporting and aligning with corporate and industrial Information Security strategic plans. * Responsible for the Information Security Architecture team, whose objective is to lead planning, strategy, studies and PoCs, design and implementation standards, and security controls in hybrid (Cloud and On-premises) and multi-cloud environments for security risk mitigation. * Responsible for the DevSecOps team, whose objective is to lead monitoring, strategy, and implementation of controls across the Group’s software development pipeline, advising and supporting development teams in mitigating risks during software development. 2512180202551839395


