Governance/Cybersecurity Specialist

Description

Job Summary: Responsible for developing, implementing, and overseeing cybersecurity governance, risk management, compliance, and incident response, aiming for continuous improvement. Key Highlights: 1. Development and Oversight of Governance Aligned with NIST CSF and ISO 27001 2. Risk Management and Security Vulnerability Assessment 3. Leadership in Internal and External Compliance Audits Evertec is a technology company specializing in financial services, with over 27 years of market presence and operations across 26 countries in Latin America and the Caribbean, processing over 11 billion transactions annually. We offer a comprehensive portfolio of software, acquiring, payment processing, and payment technologies, contributing to the digital transformation of financial institutions, enterprises, and fintechs. Our commitment lies in technological excellence, financial inclusion, and generating sustainable value for customers, employees, and partners. Requirements: **Job Responsibilities:** * Governance Development and Oversight: * Design and maintain governance frameworks aligned with NIST CSF and ISO 27001 standards. * Develop and implement security policies, standards, and procedures across the organization. **Risk Management:** * Conduct regular risk assessments to identify and mitigate security vulnerabilities. * Oversee third-party risk management programs and ensure vendor compliance with security policies. **Compliance and Auditing:** * Ensure adherence to regulatory requirements and industry standards. * Lead internal and external audits, including gap analyses, remediation plans, and reporting. * Incident Response and Threat Management: * Develop and implement incident response plans, including playbooks and escalation protocols. * Oversee security event monitoring and analysis using SIEM tools and other technologies. **Stakeholder Engagement:** * Serve as the liaison between cybersecurity, IT, and business leadership teams to align security objectives with business goals. * Provide regular updates and reports to senior management on security posture and risk management progress. **Continuous Improvement:** * Promote continuous improvement in cybersecurity governance by leveraging industry best practices and lessons learned. * Stay current on emerging threats, vulnerabilities, and regulatory changes to ensure proactive responses. Hybrid work model — 3 days per week in the office. Location: Chácara Santo Antônio — near Morumbi Station Benefits What you’ll find here: * Partnership club * Medical assistance * Meal allowance * Childcare assistance * Life insurance * Transportation allowance * Flexible benefits (you choose the benefits that suit your needs). * At Sinqia, we value diversity and understand that what adds value is precisely diverse ideas and perspectives. Therefore, race, color, religion, gender and gender identity, nationality, disability, sexual orientation, ancestry, or age will not prevent you from joining our team. Do you identify with this position? It could be yours! Send us your resume.