Lead the end-to-end Information Security and Data Privacy discipline: define strategy, ensure execution by the three towers (Operations, GIA, and Advanced Support), and be accountable for the organization’s security posture and compliance before executive leadership, audits, and regulators. If you share our purpose, have a hunger for challenges, and wish to play as a team while keeping your guard down in a collaborative environment where everyone acts with an owner’s mindset, a results-driven attitude, and without taking shortcuts, this is your place!! Join us on this journey as a **Provoker**, because now is the time to begin! **Responsibilities and Assignments** **Key Challenges of the Role:** * Security & Privacy Strategy and Governance \- Define and maintain policies, frameworks, risk appetite, and metrics for the discipline, ensuring alignment with business objectives. * Protections and Detection \- Be accountable for the effectiveness of the control portfolio: IAM, EDR/NDR/IDS, DLP, encryption, hardening, and vulnerability management—delegating execution to the towers and holding them accountable for outcomes. * Incident and Cyber Crisis Response \- Ensure mature response capability: operation of the contracted SOC, updated playbooks, periodic exercises, crisis communication, and lessons-learned cycle. * Privacy and LGPD \- Be accountable for technical LGPD compliance: legal bases, consent, DPIA, fulfillment of data subject rights, and data retention—acting as the interface with CISO/DPO. * Third-Party Security and Secure SDLC \- Ensure security due diligence and contractual security clauses with suppliers, and adoption of secure development practices (SAST/DAST, DevSecOps, API security) in partnership with the SI Architecture discipline. * Awareness and Culture \- Maintain training programs, phishing drills, and campaigns—with behavioral metrics demonstrating evolution of security culture. * Privacy & Security by Design (Governance) \- Define the security and privacy requirements, standards, and acceptance criteria the organization must follow, ensuring their application across projects in collaboration with the SI Architecture discipline. * Compliance and Security Audits \- Be accountable for certifications and audits (ISO 27001 and ISO 27701, where applicable), ensuring timely evidence submission and remediation—with support from the towers. * Budget Planning and Management \- Plan and manage the discipline’s budget: partner contracts, tools, training, and projects—prioritizing by risk and return. * Strategic Partner Management \- Be accountable for SOC/CSIRT and MSS contracts at the executive level (renewals, scope, penalties), supported by technical governance exercised by the Advanced Support & Continuous Improvement discipline. **Requirements and Qualifications** **What You Need to Join This Team:** * Bachelor’s degree completed in Information Security, Information Technology, Information Systems, Computer Science, Computer Engineering, or related fields. * Solid experience in technology, particularly in Information Security and in leadership or coordination roles managing teams and consultants/suppliers. * Comprehensive hands-on experience across the discipline: governance, security operations, IAM, incident response, privacy/LGPD, and compliance. * + Experience managing security contracts and suppliers (SOC, CSIRT, MSS). + Experience with audits and certifications (ISO 27001; ISO 27701 preferred) and frameworks such as NIST CSF and CIS Controls. * Experience in budget management and risk-based investment prioritization. * Mature executive communication: reporting to executive leadership and committees, and interfacing with CISO/DPO. **Desired Qualifications:** * Postgraduate degree or specialization in Information Security, Cybersecurity, IT Governance, Risk Management, or related areas. * Certifications: CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, CDPO, or equivalents. * Prior experience in hybrid operating models (lean internal team + partners). * Familiarity with the EOS method (L10, scorecard, rocks) or similar management models. * Experience securing cloud and hybrid environments. **Additional Information** **Explore Our Benefits:** **For Your Well-being and Quality of Life:** Meal or Food Allowance — to keep your energy up. Medical and Dental Assistance — because health is a priority. Life Insurance — for your security and peace of mind. Birthday Day Off — to enjoy your special day. Profit and Results Sharing — if the company wins, you win too! Transportation Allowance — to meet us at the office. Happy Holidays — a special year-end bonus to help with your Christmas dinner. Zenklub — caring for mental and emotional health, including consultations with nutritionists. Wellhub — to balance body and mind through physical activities. OnHappy — to enjoy weekends, holidays, or vacations! **For Your Growth and Learning:** Edu-k — a content platform for your development. Leadership Academy — internal trainings to prepare you as a leader. Galena — a platform offering courses from top educational institutions in the country. **For Your Family:** Childcare Allowance — support during your child’s early steps. More Family — remote work for mothers until 12 months after childbirth and for fathers during the first month. Dependent Allowance — special benefit for children with disabilities. Baby Kit — a thoughtful gift for new parents. School Supplies — assistance for purchasing school supplies for children up to age 14. Happy Kids — a lovingly prepared celebration at our office for children up to age 10. **Voke** is here to care for you and your family! Don’t miss this chance to take the next step in your career. **Apply now** and show that you’re ready to tackle this challenge! **We Are Shaping the FUTURE — and you can be part of it!** We were born to drive change and transform the relationship with technology—creating smarter, more sustainable solutions for businesses, people, and the planet. **Our purpose is to enable a more conscious and innovative technology consumption.** **Business** We are a hardware ecosystem offering technology access solutions with a broad portfolio and high availability. As the national leader in hardware leasing under the *As a Service (HaaS)* model and in selling certified pre-owned technology equipment, we deliver straightforward solutions that optimize everyday operations for businesses and individuals. **People** We believe in transforming technology consumption into something smarter, more accessible, and personalized. Our commitment is to deliver efficient services tailored to each person’s unique needs—delivering a truly differentiated experience. **Sustainability** We are committed to the planet’s future. Through intelligent, responsible circular economy solutions, we reduce electronic waste and generate positive impact. To date, we have significantly contributed to reducing technological waste—proving that innovation and sustainability go hand in hand. If you share our purpose and seek exciting challenges, join us in a collaborative, innovative, and dynamic environment! Here, we value those who demonstrate an **owner’s mindset**, always **play as a team**, keep their **guard down**, and show **hunger for challenges**. Our team consists of people who are **results-driven**, **never take shortcuts**, and exercise strong **critical thinking** to achieve excellence. **Your place is here!** Join us and build the future with **YOUR CHAIR** in this team!
João Silva
Indeed · HR
João Silva
Indeed · HR
