[Cyber] GRC Manager in Information Security

Description

Job Summary: Lead GRC strategy and operations as well as fraud prevention efforts, ensuring compliance and minimal risk across TOTVS, RD Station, and Linx environments. Key Highlights: 1. Strategic leadership in GRC and fraud prevention 2. Information Security risk management 3. Promotion of security and compliance culture **[Cyber] GRC Manager in Information Security** ====================================================== TOTVS | São Paulo - SP | Hybrid Job Description Lead GRC strategy and operations as well as fraud prevention efforts, ensuring that the environments of TOTVS, RD Station, and Linx operate in full compliance and with the lowest possible risk level, optimizing resources and promoting a security culture. Responsibilities and Duties WHAT YOU WILL DO: * Manage responses to customer due diligence questionnaires from TOTVS, RD Station, and Linx regarding product and operational security (TPRM where the company acts as a supplier); * Manage security and compliance assessments of tools used or requested internally by the three companies to ensure secure operations (TPRM where the company acts as a client); * Coordinate, together with internal marketing, ongoing awareness and training initiatives on information security for employees across all three companies; * Ensure implementation of preventive actions to maintain operations compliant with applicable regulations, including: ISO 27000, ITGC (Information Technology General Controls), ISAE 3402, SOC1/SOC2, NIST CSF, and PCI-DSS; * Support RD Station’s product operations team in rapidly and effectively containing fraud incidents within its products. * Identify and manage Information Security risks, producing demonstrative materials on risks and mitigations per segment/product/company; * Generate and present operational metrics (e.g., Information Security, Incident Response, Secure Development) demonstrating the ROI of security investments. Requirements and Qualifications **WHAT WE EXPECT FROM YOU:** * Bachelor’s degree completed in Technology, Information Security, Administration, or related fields. * Solid experience in leadership or senior management roles within GRC, Compliance, or Technological Risk areas. * Advanced knowledge of frameworks and regulations (ISO 27000, NIST CSF, PCI-DSS, ITGC, SOC1/SOC2, ISAE 3402); * Experience developing operational and executive metrics (e.g., Security ROI). * Experience designing and delivering information security awareness and training programs; Desirable Requirements IT WOULD BE GREAT IF YOU HAD: * Postgraduate degree/MBA in Information Security Management or Cybersecurity. * Recognized certifications (CISM, CRISC, CISSP, CISA, etc.). * Knowledge focused on detection and prevention of technological fraud. * Experience using or implementing GRC tools. Salary Range To be discussed Employment Type CLT Benefits * TOTVS Network University — a corporate university offering free content and certifications for all employees; * +Saudáveis Program — supporting each TOTVER’s physical, mental, and financial well-being through advisory services and targeted initiatives; * +Vantagens Program — Latin America’s largest discount network, exclusively for our employees; * +Cuidado Program — personal support program for employees and their families, offering guidance across multiple specialties including psychology, social work, pet consulting, etc.; * Einstein Conecta — free online medical consultation service provided by physicians from Hospital Israelita Albert Einstein; * Health and dental insurance; * Meal and/or food allowance; * Transportation allowance and shuttle services at select metro stations; * Extended maternity and paternity leave; * Nursing room; * Bicycle parking; * Changing rooms; * Life insurance; * Childcare allowance; * Private pension plan; * Office designed to stimulate creativity and productivity, featuring snack areas, game rooms, billiard tables, and relaxation lounges; * Gympass. About the Company As a technology industry leader, we are a universe of nonconformist individuals driven by innovation, autonomy, learning, and performance. Together, we create opportunities, transform futures, and share knowledge. Your professional development happens here in an inclusive, respectful, and energizing environment — people-first! We pursue sustainable growth, leveraging data and AI to drive smarter, more efficient outcomes for our customers. Join us in innovating and building the future of technology. #VemPraTOTVS #SomosTOTVS