Coordenador de Segurança da Informação (SI)

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Coordenador de Segurança da Informação (SI) based in Brazil.

In this role, you will lead the development and execution of information security strategies, ensuring the protection of sensitive data, systems, and business operations. You will drive security governance, risk management, and compliance initiatives while establishing policies and procedures that strengthen the organization's security posture. Working closely with technology teams, business stakeholders, executive leadership, and external partners, you will help integrate security into everyday operations and strategic decision-making. You will oversee incident response, supplier security assessments, and customer security requirements while supporting secure software development practices. This position combines strategic leadership with hands-on coordination in a dynamic technology environment where security, innovation, and business growth must work together. You will also promote a strong security culture, monitor key performance indicators, and continuously improve organizational resilience.

• Information security strategy: Define, implement, and maintain the information security strategy and roadmap, aligning security priorities with business objectives, operational needs, and organizational risk tolerance.
• Security governance and policies: Develop, review, and oversee the implementation of information security policies, standards, procedures, and controls to ensure consistent security practices across the organization.
• Risk management: Lead the identification, assessment, treatment, and ongoing monitoring of information security risks, recommending mitigation strategies and tracking remediation efforts.
• Compliance and audits: Coordinate responses to customer security questionnaires, internal and external audits, and compliance assessments, ensuring accurate documentation and timely delivery of required evidence.
• Third-party security management: Evaluate the security posture of suppliers, vendors, and service providers, identifying potential risks and ensuring appropriate security requirements are incorporated into business relationships.
• Incident response: Coordinate the preparation, investigation, response, and follow-up of information security incidents, working with relevant teams to minimize impact and strengthen preventive controls.
• Secure development and technical controls: Collaborate with Engineering and Technology teams to promote secure software development practices, vulnerability management, access control, and the adoption of appropriate security safeguards.
• Security awareness and culture: Design and implement awareness initiatives and educational activities that encourage employees to understand security responsibilities and adopt good information security practices.
• Performance monitoring and executive reporting: Define and monitor security maturity indicators, risk metrics, and performance measures, presenting results, priorities, and recommendations to executive leadership.
• External partner management: Manage relationships with specialized security consultants, service providers, and external partners, ensuring service quality and alignment with security objectives.
• Privacy and data protection: Support initiatives related to data privacy and compliance with Brazil's General Data Protection Law (LGPD), coordinating security practices with relevant privacy requirements.
• Cross-functional leadership: Engage stakeholders across technical, business, and executive teams to balance security requirements with operational efficiency, business priorities, and customer expectations.

Requirements

• Professional experience: Solid experience in Information Security, preferably within technology companies, SaaS businesses, or other environments where data protection and digital operations are critical.
• Security risk management: Practical knowledge of information security risk identification, assessment, treatment, mitigation, and monitoring.
• Governance and policy management: Experience developing, implementing, and maintaining information security policies, standards, procedures, and internal controls.
• Audits and customer assessments: Experience responding to customer security questionnaires, supporting audits, gathering compliance evidence, and addressing security-related requirements from clients and business partners.
• Third-party risk assessment: Knowledge of supplier and vendor security evaluation processes, including identifying risks associated with external systems, services, and business relationships.
• Security incident management: Familiarity with security incident response processes, including coordination, investigation, mitigation, and follow-up activities.
• Data protection and privacy: Knowledge of the LGPD and data privacy principles, with an understanding of their implications for information security governance and business operations.
• Technical security fundamentals: Understanding of vulnerability management, access control, secure software development, and the implementation of technical security controls.
• Leadership and ownership: A proactive, autonomous approach with a strong sense of accountability, initiative, and the ability to drive security initiatives from planning through execution.
• Communication and stakeholder engagement: Excellent communication skills, with the ability to explain security topics clearly to technical teams, executives, customers, and auditors.
• Influence and collaboration: Ability to engage stakeholders across different departments, build alignment, and promote security practices without losing sight of business priorities.
• Business-oriented thinking: Sound judgment in balancing security risks, compliance obligations, operational efficiency, and organizational objectives.
• Planning and prioritization: Strong organizational skills and the ability to manage multiple initiatives, allocate resources, and prioritize activities according to risk and business impact.
• Consultative approach: Ability to work constructively with customers, auditors, consultants, and internal teams, providing clear guidance and practical recommendations.
• People leadership: Ability to guide, motivate, and develop team members while encouraging knowledge sharing and continuous improvement.

Nice to have:

• Experience supporting or managing information security certification processes.
• Familiarity with cloud environments such as AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Previous experience coordinating information security teams or leading security professionals.
• Knowledge of communication and messaging platforms, including WhatsApp Business API, email, and SMS.
• Intermediate to advanced English proficiency for professional communication and technical documentation.

Benefits

• Health insurance: Medical coverage to support your health and well-being.
• Flexible meal allowance: Food allowance provided through Flash.
• Professional development: Access to Alura corporate learning resources and educational programs.
• Training incentives: Financial or organizational support for courses and continued professional development.
• Life insurance: Coverage providing additional financial protection.
• Fitness and wellness: Access to TotalPass for fitness activities and well-being services.
• Birthday leave: A day off to celebrate your birthday.

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

 Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1