Coordenador de Segurança da Informação (SI)

Jobgether; Brasil; On-site; BRL 300,000 - 520,000; Full time

Benefits offered by this job

Health insurance

Flexible meal allowance

Professional development

Training incentives

Life insurance

Fitness and wellness

Birthday leave

Job summary

Jobgether in Brazil seeks a Senior Coordinator for Information Security to lead strategy, governance, and risk management across the organization. You will drive incident response, third‑party security evaluation, and secure software practices while partnering with engineering and executives.

This role combines strategic leadership with hands‑on coordination in a dynamic tech environment, promoting a strong security culture and continuous resilience improvements.

Qualifications

• Solid experience in information security, preferably within technology companies, SaaS businesses, or other demanding environments.
• Practical knowledge of information security risk identification, assessment, treatment, mitigation, and monitoring.
• Experience developing, implementing, and maintaining information security policies, standards, procedures, and internal controls.
• Experience responding to customer security questionnaires, supporting audits, gathering compliance evidence, and addressing client requirements.
• Knowledge of supplier and vendor security evaluation processes and third‑party risk management.
• Familiarity with security incident response processes and follow‑up activities.
• Knowledge of LGPD and data privacy principles and their implications for governance.
• Understanding of vulnerability management, access control, secure software development.
• Strong leadership, ownership, and proactive drive to advance security initiatives.
• Excellent communication to technical, executive, customer, and audit audiences.
• Ability to balance security with business priorities and operations.
• Planning and prioritization skills to manage multiple initiatives.
• Consultative approach with customers and auditors.
• People leadership and mentoring abilities.

Responsibilities

• Define and maintain the information security strategy and roadmap, aligning priorities with business objectives and risk tolerance.
• Develop and enforce information security policies, standards, procedures, and controls across the organization.
• Lead risk assessment, treatment, monitoring, and reporting activities.
• Coordinate responses to audits and customer security questionnaires, ensuring timely evidence delivery.
• Evaluate third‑party security posture and require appropriate security controls.
• Coordinate incident response and follow‑up actions to improve controls.
• Promote secure development practices and secure coding standards.
• Design security awareness programs to improve staff understanding of responsibilities.
• Monitor security metrics and report to executives with clear recommendations.
• Manage relationships with security consultants and external partners.
• Support LGPD compliance initiatives and privacy governance.
• Collaborate with cross-functional teams to balance security with business needs.

Skills

InfoSec strategy

Risk management

Governance & policy

Audits & assessments

Third-party risk

Incident response

Secure development

Security awareness

Executive reporting

Partner management

LGPD knowledge

Technical security

Leadership

Stakeholder comms

Influence & collaboration

Business-minded

Planning & prioritization

Consultative approach

People leadership

Tools

WhatsApp Business API

Job description

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Coordenador de Segurança da Informação (SI) based in Brazil.

In this role, you will lead the development and execution of information security strategies, ensuring the protection of sensitive data, systems, and business operations. You will drive security governance, risk management, and compliance initiatives while establishing policies and procedures that strengthen the organization's security posture. Working closely with technology teams, business stakeholders, executive leadership, and external partners, you will help integrate security into everyday operations and strategic decision-making. You will oversee incident response, supplier security assessments, and customer security requirements while supporting secure software development practices. This position combines strategic leadership with hands‑on coordination in a dynamic technology environment where security, innovation, and business growth must work together. You will also promote a strong security culture, monitor key performance indicators, and continuously improve organizational resilience.

Accountabilities

• Information security strategy: Define, implement, and maintain the information security strategy and roadmap, aligning security priorities with business objectives, operational needs, and organizational risk tolerance.
• Security governance and policies: Develop, review, and oversee the implementation of information security policies, standards, procedures, and controls to ensure consistent security practices across the organization.
• Risk management: Lead the identification, assessment, treatment, and ongoing monitoring of information security risks, recommending mitigation strategies and tracking remediation efforts.
• Compliance and audits: Coordinate responses to customer security questionnaires, internal and external audits, and compliance assessments, ensuring accurate documentation and timely delivery of required evidence.
• Third-party security management: Evaluate the security posture of suppliers, vendors, and service providers, identifying potential risks and ensuring appropriate security requirements are incorporated into business relationships.
• Incident response: Coordinate the preparation, investigation, response, and follow‑up of information security incidents, working with relevant teams to minimize impact and strengthen preventive controls.
• Secure development and technical controls: Collaborate with Engineering and Technology teams to promote secure software development practices, vulnerability management, access control, and the adoption of appropriate security safeguards.
• Security awareness and culture: Design and implement awareness initiatives and educational activities that encourage employees to understand security responsibilities and adopt good information security practices.
• Performance monitoring and executive reporting: Define and monitor security maturity indicators, risk metrics, and performance measures, presenting results, priorities, and recommendations to executive leadership.
• External partner management: Manage relationships with specialized security consultants, service providers, and external partners, ensuring service quality and alignment with security objectives.
• Privacy and data protection: Support initiatives related to data privacy and compliance with Brazil's General Data Protection Law (LGPD), coordinating security practices with relevant privacy requirements.
• Cross-functional leadership: Engage stakeholders across technical, business, and executive teams to balance security requirements with operational efficiency, business priorities, and customer expectations.

Requirements

• Professional experience: Solid experience in Information Security, preferably within technology companies, SaaS businesses, or other environments where data protection and digital operations are critical.
• Security risk management: Practical knowledge of information security risk identification, assessment, treatment, mitigation, and monitoring.
• Governance and policy management: Experience developing, implementing, and maintaining information security policies, standards, procedures, and internal controls.
• Audits and customer assessments: Experience responding to customer security questionnaires, supporting audits, gathering compliance evidence, and addressing security‑related requirements from clients and business partners.
• Third‑party risk assessment: Knowledge of supplier and vendor security evaluation processes, including identifying risks associated with external systems, services, and business relationships.
• Security incident management: Familiarity with security incident response processes, including coordination, investigation, mitigation, and follow‑up activities.
• Data protection and privacy: Knowledge of the LGPD and data privacy principles, with an understanding of their implications for information security governance and business operations.
• Technical security fundamentals: Understanding of vulnerability management, access control, secure software development, and the implementation of technical security controls.
• Leadership and ownership: A proactive, autonomous approach with a strong sense of accountability, initiative, and the ability to drive security initiatives from planning through execution.
• Communication and stakeholder engagement: Excellent communication skills, with the ability to explain security topics clearly to technical teams, executives, customers, and auditors.
• Influence and collaboration: Ability to engage stakeholders across different departments, build alignment, and promote security practices without losing sight of business priorities.
• Business‑oriented thinking: Sound judgment in balancing security risks, compliance obligations, operational efficiency, and organizational objectives.
• Planning and prioritization: Strong organizational skills and the ability to manage multiple initiatives, allocate resources, and prioritize activities according to risk and business impact.
• Consultative approach: Ability to work constructively with customers, auditors, consultants, and internal teams, providing clear guidance and practical recommendations.
• People leadership: Ability to guide, motivate, and develop team members while encouraging knowledge sharing and continuous improvement.

Nice to have:

• Experience supporting or managing information security certification processes.
• Familiarity with cloud environments such as AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Previous experience coordinating information security teams or leading security professionals.
• Knowledge of communication and messaging platforms, including WhatsApp Business API, email, and SMS.
• Intermediate to advanced English proficiency for professional communication and technical documentation.

Benefits

• Health insurance: Medical coverage to support your health and well‑being.
• Flexible meal allowance: Food allowance provided through Flash.
• Professional development: Access to Alura corporate learning resources and educational programs.
• Training incentives: Financial or organizational support for courses and continued professional development.
• Life insurance: Coverage providing additional financial protection.
• Fitness and wellness: Access to TotalPass for fitness activities and well‑being services.
• Birthday leave: A day off to celebrate your birthday.