Cybersecurity Manager

JOB PURPOSE 

Ensure Cyber Security for hEDGEpoint environment and data, which ranges from manage the team that will do the analysis of documents to devices used by employees, company training, define the tools to be used for protecting hEDGEpoint environments, manage Cyber Security partners, define/review policies, and procedures, conduct audits and Cyber Security tests, and manage/mitigate Cyber Security risks, working with multiple stakeholders across the globe.  Provide planning on an enterprise level consistent with business goals and strategic initiatives. Assists in business modeling, planning, investment analysis and demand planning. Provide management support on special projects and analysis.

Act as DPO (Data Privacy Officer) for supporting all Data related legislations worldwide (like LGPD and GDPR), taking care of all topics related to PII data protection and acting as the communication channel between the company, government entities and personal data owners.

KEY ACTIVITIES 

• Propose, detail, and assist the implementation and evaluation of the effectiveness of cyber security controls in critical cloud environments.


• Act in activities with your team to ensure educating internal audiences on the risks and threats inherent to cloud environments and the measures to be taken to mitigate or neutralize them.


• Production of Cyber Security Requirements documentation, such as standards and policies, checklists that will be followed by the users in the company.


• Knowledge in fraud prevention and detection processes, preferably with experience in Digital Banking (onboarding, transactional analysis, cyber security).


• Expertise in creating fraud prevention rules, metrics, and flows, as well as in the development of operational policies and procedures related to the subject.


• Support the Risk area in structuring the fraud prevention cell, drafting, and maintaining information security policies, standards and procedures for fraud prevention and detection and business continuity.


• Investigate with your team suspected cases of fraud, forward technical and/or procedural problems to the responsible areas/squads,


• Suggest and lead the implementation of new fraud prevention controls, rules, and processes.


• Identify opportunities and risks in existing products and in the implementation of new products and services, to ensure that the risk of fraud is identified and controlled.


• Creation of reports, KPIs and dashboards to measure fraud risk to be prepared by your team so you can present the results to the board.


• Monitor market fraud trends to mitigate possible vulnerabilities.


• Development of fraud prevention and detection training and acting securing that the disseminator of the subject will be done properly.


• Experience in project management. Knowledge and experience in the Diebold Nixdorf anti-fraud system will be considered as a differential.


• Experience in regulatory compliance with data protection laws (GDPR and LGPD) and other regulations, standards, and frameworks, such as PCI, ISO27000 family, ISO31000, NIST CSF, ISO22301.


• Continuous search for self-development regarding new technological trends in Information Security, Data Protection, secure governance of sensitive information, threats, vulnerabilities, and emerging risks.


• Acting as an information cyber security manager with your team in processes, platforms, internal and external audits, relationship with governance areas of the 2nd and 3rd line of defense (Internal Controls, Compliance, IT Governance, and Internal Audit).


• Provide support to Information Security and other areas involved in compliance management and respective action plans.


• Strong expertise to manage a CSIRT team to respond critical cyber security incidents.

QUALIFICATIONS and TECHNICAL SKILLS

• Bachelor’s degree or higher required


• Solid experience in cyber security


•  Expert level understanding of business related KPIs


• Experience in the application of international cloud security standards such as CSA (Cloud Security Alliance), NIST, PCI in the security architecture of SAAS, PAAS and IAAS environments in public clouds such as AWS.


• Experience in servicing external and internal audits.


• Ability to question, propose solutions, pro activity, customer relationship experience.


• Experience with specification, implementation, operation of security controls in cloud environment (AWS).


• Advanced knowledge in Office package (Excel, PowerPoint, and Word).


• Understanding of cloud security compliance monitoring and assessment products (examples include: Prisma, Illumio, Azure Security Center, AWS Security Hub, Splunk Enterprise Security).


• Understanding of DevSecOps and desirable certifications: AWS Certified Security Specialist, Azure Security Engineer and similar. (desirable)


• Good understanding of Pen Testing terms and reports.


• Expertise with EDR solution (Crowdstrike).


• Good understanding of DLP and CASB.


• English Language: Full Professional Proficiency is required