Cybersecurity Manager

Description

With over 40 years of history, we are pioneers and specialists in the payroll-deductible loan segment. We also offer fixed-income and variable-income investment products through Paraná Banco Investimentos. We provide secure and transparent loans for those who wish to settle larger debts, invest in something, or fulfill a dream. Our purpose is to transform financial solutions into smiles! **What makes us special?** * **We are passionate about smiles:** We seek the best experiences for our customers, value people, and are passionate about our company. * **We are innovators and pursue simplicity:** We test, learn, and continuously strive for improvement. * **We are flexible and drive change:** We cultivate adaptability as a virtue, encouraging and promoting constant transformations to achieve the best outcome in every journey. * **We are data-driven:** Our objectives are clear—if we cannot measure it, we cannot do it. We are guided by efficiency and maximize the use of available resources. Our job openings are open to everyone! Without distinction of gender, race, color, age, sexual orientation, or ethnicity. Requirements: **Responsibilities and duties** * Conduct structured feedback sessions at appropriate intervals using one-on-one meetings, performance evaluation tools, and formal documentation to foster a collaborative and healthy environment; * Align security initiatives with corporate objectives through strategic planning, risk analysis, integration with business units, and adoption of governance frameworks; * Delegate tasks and responsibilities using the RACI matrix, management systems, and alignment rituals to optimize resources and strengthen team competencies; * Monitor security indicators and events via SIEM, dashboards, automated alerts, and periodic reports to anticipate risks and ensure proactive responses; * Ensure compliance with security policies through training, awareness campaigns, internal audits, and compliance tools; * Serve as a strategic liaison between security, business units, and senior management, contributing to corporate decisions related to risk and continuity. **Expected outcomes** * Establish a robust APPsec program and security champions initiative; * Increase the adoption rate of current security tools; * Transition the current access management team into an identity management–focused team; * Establish a solid pentesting schedule; * Feed back to the GRC team the need to document new controls; * Lead all aspects of cybersecurity at the Bank; will report to the CISO but must be the OWNER of the cybersecurity subject matter. **Mandatory requirements** * Advanced knowledge of frameworks and regulations: ISO 27001, NIST, CIS Controls; * Information security and risk management (advanced level); * Experience managing SI services and products (SOC, WAAP, Content Filtering, EDR, NDR, etc.); * Experience leading Application Security initiatives (including development pipeline vision, APIs, and APPsec models); * Experience managing Information Security teams in complex environments, influencing key areas such as Systems Engineering, Solution Architecture, and IT Infrastructure; * Vision and experience with results-oriented management based on metrics and OKRs; * Focus on team performance and continuous process improvement; * Experience managing vendor relationships and third-party service delivery; * Experience managing access control and identity teams, including regulatory compliance; * Analytical capability to interpret reports and metrics. **Desirable requirements** * Certifications: CISSP, CISM, DRI, or ISO 27001; * Experience with IGA, PAM, and CIEM solutions; * Prior experience building an APPsec program from scratch.