Director of Cybersecurity & Incident Response (Brazil)

Tasks

• Build and lead cybersecurity team
• Conduct vendor due diligence
• Conduct vulnerability management
• Coordinate audit and board reporting on cybersecurity
• Coordinate post incident remediation
• Design cybersecurity policy
• Embed security by design culture
• Implement incident response plan
• Integrate cybersecurity into risk framework
• Lead penetration testing
• Lead security operations center
• Maintain cloud services contracting policy
• Manage cloud risk
• Manage custody architecture
• Manage security information and event management
• Manage third-party risk
• Oversee private key protection
• Perform threat intelligence
• Report incidents to regulators
• Represent company to regulators and auditors
• Run red-team exercises

Perks/Benefits

• N/A

Skills/Tech-stack

AML | Access Management | Blockchain Security | CSF 2.0 | Cloud Security | Compliance Management | Contract Security | Cryptographic key management | Cybersecurity Policy | DLP | Digital forensics | Due Diligence | Event management | Hardware Security Module | Hardware security | IAM | ISO 27001 | Identity and Access Management | Identity and access | Incident Response | Key Management | LGPD | MPC | Multisignature | NIST CSF | NIST CSF 2.0 | Operations Center | PAM | PCI DSS | Penetration Testing | Private Key | Private Key Security | Privileged Access | Privileged Access Management | Red team | Risk Management | SOC Operations | Security Information | Security Information and Event | Security Information and Event Management | Security Module | Security Operations Center | Security operations | Smart contract | Smart contract security | Third Party | Third-Party Risk | Third-party risk management | Threat Intelligence | Threat modeling | Vendor due diligence | Vulnerability Management