Information Security Coordinator

Description

We are looking for an Information Security Coordinator (Hands-on), who will be responsible for leading the evolution of the organization's information security, serving as the primary technical, strategic, and governance reference for the area. The role will play a fundamental part in building and consolidating the Corporate Information Security Program, structuring processes, controls, policies, and capabilities that enable the company to grow securely, scalably, and sustainably. **Apply below!** **Responsibilities and duties** * Security Strategy and Governance * Lead the development and evolution of the Corporate Information Security Program. * Define and execute the strategic security roadmap. * Structure security policies, standards, guidelines, and controls. * Conduct periodic corporate risk assessments. * Develop security indicators, metrics, and executive dashboards. * Support strategic decisions regarding investments and priorities. * Leadership and Organizational Influence * Serve as the organization’s primary reference on information security topics. * Influence executive decisions related to risks, security, and investments. * Lead security forums and committees. * Promote an organizational culture oriented toward security. * Coordinate vendors, consultants, and specialized partners. * Support the training and future development of the security team. * Translate technical risks into business impacts for leadership and executives. * Architecture and Technical Security * Define secure architecture standards. * Review application, API, and infrastructure architectures. * Support decisions involving cloud, identity, data, and environment protection. * Evaluate security technologies and solutions. * Application Security and DevSecOps * Structure Secure SDLC practices. * Define AppSec processes. * Advance SAST, DAST, and dependency analysis initiatives. * Support engineering teams in identifying and remediating vulnerabilities. * Ensure security integration from the conception of new products. * Cloud and Infrastructure Security * Support the evolution of AWS, Azure, Oracle Cloud, and hybrid environments. * Define security controls for cloud workloads. * Lead hardening and infrastructure protection initiatives. * Support identity and privileged access management strategies. * Risk Management and Continuity * Identify, assess, and prioritize corporate risks. * Support financial and operational impact analyses. * Structure risk mitigation plans. * Support business continuity and disaster recovery initiatives. * Security Operations * Enhance incident monitoring and response processes. * Support SOC and SecOps consolidation. * Structure continuous vulnerability management. * Conduct post-incident analyses and improvement plans. * Executive Engagement * Prepare executive presentations and strategic reports. * Participate in leadership and governance forums. * Support internal and external audits. * Represent Security to the board and strategic stakeholders. **Requirements and qualifications** **We expect you to have** * Completed bachelor’s degree in Computer Science, Computer Networks, Information Systems, or related fields. * Solid experience in Information Security. * Experience in complex corporate environments. * Experience with cloud computing (AWS, Azure, or GCP). * Hands-on experience with AppSec, IAM, Infrastructure Security, and Vulnerability Management. * Experience in corporate risk management. * Participation in audits and regulatory processes. Experience leading multidisciplinary security initiatives * * Technical domains including: * Security Architecture * Cloud Security * IAM and MFA * Vulnerability Management * SIEM and Monitoring * Backup and Continuity * API Security * LGPD * DevSecOps * Risk Management **It will be a plus if you have** * ISO 27001 Lead Implementer or Lead Auditor certification. * CISSP, CISM, CCSP, or equivalent certifications. * Cloud certifications such as AWS Certified SysOps Administrator or Microsoft Certified: Azure Administrator Associate. * ITIL Foundation certification. * Network or infrastructure-related certifications such as Cisco CCNA or VMware VCP. * Knowledge of governance and security management frameworks. * Experience in financial or regulated environments. **Additionally, we consider the following competencies important:** * Hands-on profile with strategic vision. * Ability to operate across strategy and execution. * Strong systemic vision and analytical capability. * Excellent communication skills with both technical and executive audiences. * Ability to influence without relying on formal authority. * Skill in transforming technical risks into business decisions. * Orientation toward metrics and continuous improvement. * Ability to build relationships across Engineering, Product, Infrastructure, Compliance, and the Executive Team. * Alignment with our values of simplifying people’s lives, innovating, connecting, and leading. **Additional information** **Employment type:** CLT + Benefits **Work format:** Remote **Benefits:** * Comprehensive health insurance fully covered for the employee; * Monthly remote work allowance; * Wellhub (Gympass); * Daycare allowance for children up to 5 years and 11 months old; * Meal/food allowance; * Birthday day off; * Extended paternity leave (14 days); * Ongoing training for professional development; * Pluxe-Cuida Program: psychological, financial, and legal support; * SESC membership for leisure, culture, and well-being. #### **At Werecruiter, we believe organizational culture is the key to any company’s success.** #### **We are committed to creating an environment where innovation, respect, and personal growth form the foundation of our interactions.** #### **We value diversity and inclusion, ensuring all our partners, employees, and clients feel welcomed and motivated to reach their full potential. By joining our team—or one of the companies we serve—you contribute to a greater purpose: transforming the labor market through meaningful human connections.**