Senior Information Security Analyst | Cryptography

Description

Job Summary: Junior Information Security Analyst focused on cryptography, HSMs, and key management within payment and transaction environments. Key Highlights: 1. Serve as the primary technical authority on cryptography and HSM topics. 2. Lead the end-to-end lifecycle management of cryptographic keys. 3. Promote an inclusive culture and value diversity. **About Elo** **We are a 100% Brazilian company!** Elo is one of Brazil's leading payment technology companies. With over ten years of history and more than 43 million active cards issued in partnership with 38 issuers. With our uniquely Brazilian and innovative DNA, our mission is to foster digital payment inclusion in Brazil. We offer a comprehensive portfolio of credit, debit, prepaid, and specialized cards for individuals and businesses. Additionally, we design customized solutions for enterprises—whether through our tokenization and fraud prevention platforms, QR Code and NFC contactless payments, or our specialized consulting services aimed at generating more business for our partners. We respect individuality and promote an inclusive culture focused on equity and valuing differences (e.g., gender, religion, persons with disabilities, LGBTQIAP+, race and ethnicity). All our job openings reflect this commitment. Want to learn more about Elo? Visit: https://www.elo.com.br/ Interested? Then come discover the challenge we have for you! **Our Information Security Team** We are seeking a Junior Information Security Analyst to join our team, focusing on data and transaction security—particularly the management and operation of Hardware Security Modules (HSMs) for both payment and general-purpose applications. **Responsibilities and Duties** *As an* *Information Security Analyst,* *you will:* * Serve as the primary technical authority on cryptography, HSMs, key management, and PCI PIN compliance, supporting strategic decision-making alongside leadership; * Administer, operate, and evolve payment and general-purpose HSM environments, ensuring high availability, security, and adherence to industry best practices; * Lead the full lifecycle management of cryptographic keys—including generation, distribution, storage, rotation, backup, recovery, revocation, and secure disposal; * Plan, conduct, and supervise cryptographic key ceremonies with partners, ensuring compliance with PCI PIN requirements, audits, and internal standards; * Act as the technical owner of corporate cryptographic controls, defining and improving standards, operational procedures, and security requirements; * Lead and/or execute projects involving HSM deployment, integration, migration, and upgrades, as well as tokenization, encryption, and data protection solutions; * Support security architectures and critical business solutions, ensuring appropriate use of cryptographic mechanisms and protection of sensitive information; * Investigate and respond to incidents related to cryptography, cryptographic keys, and HSM devices in coordination with Elo’s NOC and SOC; * Develop and implement automation, controls, and improvements to increase operational efficiency and reduce risks in cryptographic processes; * Maintain cryptographic inventories, custody controls, operational records, and evidence required for internal and external audits; * Conduct technical and risk assessments related to cryptographic algorithms, secret management, tokenization, and data protection; * Serve as the primary point of contact for audits, certifications, and regulatory evaluations related to cryptography and HSMs under NIST, PCI DSS, and PCI PIN; * Draft, review, and update policies, procedures, operational manuals, runbooks, and metrics related to cryptography; * Define and monitor metrics for availability, security, compliance, and maturity of cryptographic services; * Mentor junior and mid-level professionals, promoting knowledge sharing, technical development, and reduced operational dependencies; * Support innovation and technological advancement initiatives related to modern cryptography, data protection, post-quantum algorithms, tokenization, and secret management; * Collaborate daily with Security, Development, Architecture, Infrastructure, Operations, and Product teams to ensure secure implementation of cryptographic controls across business processes and new Elo projects. **Requirements and Qualifications** *For this challenge, we require you to:* * Hold a completed undergraduate degree in Information Technology, Computer Engineering, Information Security, or related fields; * Have solid experience in Information Security, specifically in cryptography, cryptographic key management, or protection of sensitive data; * Have hands-on experience administering and operating payment HSMs and/or general-purpose HSMs in critical environments; * Possess advanced knowledge of symmetric and asymmetric cryptography, cryptographic algorithms, hashing, digital signatures, PKI, and digital certificates; * Have practical experience managing the cryptographic key lifecycle (generation, distribution, storage, rotation, backup, recovery, and disposal); * Have experience conducting cryptographic key ceremonies, custody processes, and segregated controls; * Understand regulatory and industry requirements related to cryptography and payment methods—especially PCI DSS and PCI PIN; * Have experience analyzing and resolving incidents related to cryptography, digital certificates, and HSMs; * Demonstrate ability to independently analyze complex problems and make sound technical decisions; * Exhibit strong teamwork skills, effective communication, and a proactive attitude toward problem resolution; * Be available for maintenance and HSM relocation visits at data centers in São Paulo and Rio de Janeiro; * Possess technical English proficiency for reading documentation, manuals, and interacting with vendors. Additionally, the following would be advantageous: * Security certifications (e.g., CompTIA Security+, ISO 27001, PCI DSS, PCI PIN); * HSM vendor certifications (e.g., Thales payShield or Luna, Entrust nShield or equivalents); * Experience with PCI DSS and PCI PIN audits and certification processes; * Knowledge of HSM integration with financial applications. **Additional Information** **To work at Elo, we seek individuals who:** * Demonstrate proactive ownership and strive to exceed results; * Respond quickly to change, focusing on simplicity and execution; * Collaborate effectively as part of a team—sharing knowledge and recognizing each colleague’s performance and importance; * Value open dialogue and honest feedback; **These reflect our core cultural values: “Team Player, Exceed Results, Innovate & Experiment, Customer-Centric, Play Fair”.** **At Elo, culture embodies our unique ‘Elo Way’ of getting things done!** **Check out our benefits and perks:** * Profit Sharing Program (PPR); * Health insurance (Bradesco – Co-payment); * Optional dental insurance (Bradesco); * Life insurance (Banco do Brasil); * Optional private pension plan (employee contribution up to 7.8% of salary; Elo contribution between 100% and 200%, per plan rules); * Meal/food allowance of BRL 1,800.00; * Free Balance of BRL 150.00 for credit functionality; * Christmas Card worth BRL 750.00; * Home Office Allowance: BRL 200.00 for hybrid model, BRL 300.00 for fully remote; * Mobility Allowance of BRL 400.00; * Free Parking; * Daycare Assistance for mothers and fathers; * Culture Benefit (to be used at theaters, cinemas, or bookstores); * Extended Parental Leave (for same-sex couples, fathers, adoptive parents, etc); * Birthday Day Off; * Zenklub (Psychotherapy – up to 4 sessions per month fully covered by Elo); * WellHub and TotalPass (network of gyms and studios for sports activities). **Important:** **Our company offers three work models: hybrid, on-site, and fully remote—but the adopted model may vary depending on the specific dynamics and needs of each department.** **Our office is located in Barueri/SP at Alameda Xingu, 512 – Alphaville Industrial.** We are one of Brazil’s leading payment technology companies, with over ten years of history and more than 43 million active cards issued in partnership with 38 issuers. With our uniquely Brazilian and innovative approach, our **mission is to foster digital payment inclusion in Brazil**. We offer a comprehensive portfolio of credit, debit, prepaid, and specialized cards for individuals and businesses. Additionally, we design customized solutions for enterprises—whether through our tokenization and fraud prevention platforms, QR Code and NFC contactless payments, or our specialized consulting services aimed at generating more business for our partners. Want to learn more about us? Visit elo.com.br