Cybersecurity Manager

Jobtailor; Barueri; Presencial; BRL 180 000 - 360 000; Tempo integral

Resumo da oferta

Jobtailor seeks an accomplished cybersecurity leader to define and execute a comprehensive strategy aligned with business goals in a bank environment. You will guide CSIRT, AppSec, Engineering, and GRC teams, manage risks, and enforce security standards across third parties and cloud platforms.

The role requires deep expertise in security tooling (SIEM, EDR/XDR, CSPM, etc.), incident response, and threat mitigation, with strong communication to all levels from engineers to executives.

Qualificações

• Bachelor's degree in Computer Science; an MBA in Cybersecurity or other Information Security specializations are important differentiators.
• Experience in financial institutions is a plus.
• Knowledge of transactional flows - PIX, SPB, cards, etc.
• Understanding of networks, operating systems (Windows, Linux), applications, DevSecOps, databases and cloud environments.
• Experience with SIEM, EDR/XDR, CSPM, CTI, DLP, WAF, DAST, SAST, SCA, ZTNA, IDS/IPS, Vulnerability Management, CWPP and DRP.
• Deep knowledge of software security, microservices architecture and DevOps practices.
• Experience with incident response plans and threat mitigation.
• Experience working with a SOC.
• Skill in vulnerability analysis, penetration testing and system hardening, including CTEM.
• Ability to conduct investigations, perform threat hunting and collect Threat Intelligence.
• Experience in assessing, managing and mitigating cyber risks.
• Clear communication skills across organizational levels, from technical teams to senior leadership.
• Ability to lead security teams, motivate talent and ensure continuous professional development.

Responsabilidades

• Create, refine, and execute a comprehensive cybersecurity strategy that aligns with the bank’s business objectives.
• Lead the CSIRT, AppSec, Engineering and GRC teams (Access, PCN, Awareness, Training), ensuring alignment and up-to-date practices.
• Assess and manage cybersecurity risks, developing strategies to mitigate them effectively.
• Manage third‑party service providers to ensure cybersecurity standards are enforced.
• Experience managing a SOC.
• Evaluate and integrate new security tools and technologies.
• Oversee regular checks and audits.
• Experience with Public Cloud is mandatory.

Conhecimentos

CSIRT leadership

AppSec

GRC coordination

Cloud security

Threat hunting

Incident response

Threat intelligence

Vulnerability mgmt

Security architecture

Penetration testing

Formação académica

Bachelor's in Computer Science

MBA in Cybersecurity

Ferramentas

SIEM

EDR/XDR

CSPM

CTI

DLP

WAF

DAST

SAST

SCA

ZTNA

IDS/IPS

CWPP

Descrição da oferta de emprego

Responsibilities

• Create, refine, and execute a comprehensive cybersecurity strategy that aligns with the bank’s business objectives.
• Lead the CSIRT, AppSec, Engineering and GRC teams (Access, PCN, Awareness, Training), ensuring alignment and up-to-date practices.
• Assess and manage cybersecurity risks, developing strategies to mitigate them effectively.
• Manage third‑party service providers to ensure cybersecurity standards are enforced.
• Experience managing a SOC.
• Evaluate and integrate new security tools and technologies.
• Oversee regular checks and audits.
• Experience with Public Cloud is mandatory.

Requirements

• Bachelor's degree in Computer Science; an MBA in Cybersecurity or other Information Security specializations are important differentiators.
• Experience in financial institutions is a plus.
• Knowledge of transactional flows - PIX, SPB, cards, etc.
• Understanding of networks, operating systems (Windows, Linux), applications, DevSecOps, databases and cloud environments.
• Experience with SIEM, EDR/XDR, CSPM, CTI, DLP, WAF, DAST, SAST, SCA, ZTNA, IDS/IPS, Vulnerability Management, CWPP and DRP.
• Deep knowledge of software security, microservices architecture and DevOps practices.
• Experience with incident response plans and threat mitigation.
• Experience working with a SOC.
• Skill in vulnerability analysis, penetration testing and system hardening, including CTEM.
• Ability to conduct investigations, perform threat hunting and collect Threat Intelligence.
• Experience in assessing, managing and mitigating cyber risks.
• Clear communication skills across organizational levels, from technical teams to senior leadership.
• Ability to lead security teams, motivate talent and ensure continuous professional development.