Information Security Coordinator

Description

We are seeking an Information Security Coordinator (hands-on), who will be responsible for leading the organization's information security evolution, serving as the primary technical, strategic, and governance reference for the area. The role will play a fundamental part in building and consolidating the Corporate Information Security Program, structuring processes, controls, policies, and capabilities that enable the company to grow securely, scalably, and sustainably. For over 30 years, we have developed solutions that help leading public and private organizations in Brazil achieve their objectives by improving management performance. We have a team of specialists in education, human resource management, healthcare, and technology to ensure your business’s digital transformation. **If you are interested in working with cutting-edge technologies at a company that values:** **A digital and relaxed environment** *Multicultural, diverse team full of opportunities* **Work autonomy** *We recognize your talent. Enjoy the freedom to propose solutions* **Development** *We value your dedication and want you to grow with us* **Making a difference** *Grow with us and change the lives of millions of people* ***We are looking for*** **an Information Security Coordinator!** **Responsibilities and duties** Security Strategy and Governance * Lead the development and evolution of the Corporate Information Security Program. * Define and execute the strategic security roadmap. * Establish security policies, standards, guidelines, and controls. * Conduct periodic corporate risk assessments. * Develop security indicators, metrics, and executive dashboards. * Support strategic decisions related to investments and priorities. Leadership and Organizational Influence * Serve as the organization’s primary reference on information security topics. * Influence executive decisions related to risks, security, and investments. * Lead security forums and committees. * Promote a security-oriented organizational culture. * Coordinate vendors, consultants, and specialized partners. * Support the training and future development of the security team. * Translate technical risks into business impacts for leadership and executives. Architecture and Technical Security * Define secure architecture standards. * Review application, API, and infrastructure architectures. * Support decisions involving cloud, identity, data, and environment protection. * Evaluate security technologies and solutions. Application Security and DevSecOps * Structure Secure SDLC practices. * Define AppSec processes. * Advance SAST, DAST, and dependency analysis initiatives. * Support engineering teams in identifying and remediating vulnerabilities. * Ensure security integration from the conception of new products. Cloud and Infrastructure Security * Support the evolution of AWS, Azure, Oracle Cloud, and hybrid environments. * Define security controls for cloud workloads. * Lead infrastructure hardening and protection initiatives. * Support identity and privileged access management strategies. Risk Management and Continuity * Identify, assess, and prioritize corporate risks. * Support financial and operational impact analyses. * Structure risk mitigation plans. * Support business continuity and disaster recovery initiatives. Security Operations * Enhance monitoring and incident response processes. * Support SOC and SecOps consolidation. * Structure continuous vulnerability management. * Conduct post-incident analyses and improvement plans. Executive Engagement * Prepare executive presentations and strategic reports. * Participate in leadership and governance forums. * Support internal and external audits. * Represent Security to the executive board and strategic stakeholders. **Requirements and qualifications** **We expect you to have** * Bachelor’s degree in Computer Science, Computer Networks, Information Systems, or related fields. * Solid experience in Information Security. * Experience in complex corporate environments. * Experience in cloud computing (AWS, Azure, or GCP). * Hands-on experience with AppSec, IAM, Infrastructure Security, and Vulnerability Management. * Experience in corporate risk management. * Participation in audits and regulatory processes. * Experience leading multidisciplinary security initiatives. Technical domains of expertise: * Security Architecture * Cloud Security * IAM and MFA * Vulnerability Management * SIEM and Monitoring * Backup and Continuity * API Security * LGPD * DevSecOps * Risk Management **It is a plus if you have** * ISO 27001 Lead Implementer or Lead Auditor certification. * CISSP, CISM, CCSP, or equivalent certification. * Cloud certifications such as AWS Certified SysOps Administrator or Microsoft Certified: Azure Administrator Associate. * ITIL Foundation certification. * Networking or infrastructure certifications such as Cisco CCNA or VMware VCP. * Knowledge of governance and security management frameworks. * Experience in financial or regulated environments. **In addition, we consider the following competencies important:** * Hands-on profile with strategic vision. * Ability to operate across strategy and execution. * Strong systemic vision and analytical capability. * Excellent communication skills with both technical and executive audiences. * Ability to influence without relying on formal authority. * Skill in translating technical risks into business decisions. * Orientation toward metrics and continuous improvement. * Ability to build relationships across Engineering, Product, Infrastructure, Compliance, and Executive Leadership. * Alignment with our values of simplifying people’s lives, innovating, connecting, and leading. **Additional information** * Employment type: REMOTE — CLT **Benefits that make a difference:** Continuous training to keep you ahead VA/VR for your daily comfort Comprehensive medical assistance for your well-being Birthday Day Off because celebration matters Wellhub — Gympass for body and mind care Pluxe-Cuida, offering psychological, financial, and legal support SESC for leisure, culture, and well-being Extended paternity leave to spend more time with your family **ABOUT TECHNE** Techne is a technology company that simplifies people’s lives every day. We operate across three main business lines, each targeting a specific market segment: **Agile Development (Cronapp):** A platform accelerating the development lifecycle — from ideation to publication — enabling up to 70% time savings when developing complex systems. **Educational Management (Lyceum):** Comprehensive digital solutions and services for academic, administrative, and financial management of educational institutions, unifying all processes — from student recruitment through graduation — into a single system. **Human Resource and Payroll Management for the Public Sector (Ergon):** A human resource and payroll management system designed exclusively for the public sector, processing R$130 billion annually in personnel expenses. We are passionate about innovation and foster team collaboration to work with greater synergy. Our commitment is to deliver value to our clients and create experiences that make daily routines simpler and smoother through our solutions and services. **Explore our open positions and simplify with us.**