Head of Technology & Security – Brazil

OSL; São Paulo; On-site; BRL 782,000 - 1,148,000; Full time

Job summary

OSL seeks a Head of Technology & Security to own technology, infrastructure and cyber security for its newly licensed Austrian entity. You will act as CISO, set security baselines, and drive ICT risk management in a regulated financial environment.

You will inherit a policy framework and support from a global group, turning controls into an auditable, live technology environment while building a high-performing team from scratch.

Qualifications

• Experience at Head or CISO level in regulated financial services, fintech, payments or crypto.
• Strong knowledge of DORA and GDPR with ability to translate risk into controls.
• Hands-on cyber security, cloud, network, encryption and IAM expertise.

Responsibilities

• Own the cyber security and operational resilience of the entity's ICT systems and data, acting as CISO and setting security baselines.
• Lead incident response end to end: detection, containment, investigation and recovery with regulatory reporting.
• Be the senior technology and security voice with authority over technology decisions and priorities.
• Own compliance with DORA, delegated regulations and GDPR from tech/security perspectives.
• Lead ICT infrastructure, system architecture, releases and change management for secure operations.
• Oversee penetration testing, vulnerability management, continuous monitoring and incident detection.
• Own ICT third-party and cloud security, manage IAM (SSO, MFA, least privilege, reviews).
• Communicate risk to non-technical stakeholders and report to Senior Representative and Management Board.
• Build and lead the Technology & Security team as the entity scales.

Skills

CISO leadership

DORA regulatory knowledge

GDPR knowledge

Cloud security

Identity and access management

Wallet custody tech

Third-party risk management

Security incident response

Job description

This is a rare chance to own technology and security end to end at the birth of a regulated European crypto entity, with the autonomy to build it your way and the backing of an established, publicly listed global group. We are looking for a Head of Technology & Security to take full ownership of the technology, infrastructure and cyber security of our newly licensed Austrian entity.

You will act as the entity's CISO and lead the Technology & Security function, covering technology and engineering, IT security, and infrastructure. You will own our compliance with DORA and the wider ICT regulatory framework, set the security baseline, lead incident response, and build the technology function as the entity scales from launch toward its full operating model.

You will not be starting from a blank page. You will inherit a strong policy framework and the backing of an established global technology function, and take local ownership, turning documented controls into a live, operating, audit-ready technology environment. The ideal candidate combines deep technical and security expertise with the judgment to operate in a regulated financial environment and the drive to build a function from the ground up.

Key Responsibilities

• Own the cyber security and operational resilience of the entity's ICT systems and data, acting as CISO, setting security baselines, access controls, encryption standards and secure configuration across all ICT assets.
• Lead incident response end to end. Detection, containment, forensic investigation and recovery, ensuring ICT-related incidents are classified, documented and reported in line with DORA.
• Sit as the senior technology and security voice in the entity, with direct access to the Management Board and genuine authority over technology decisions and priorities.
• Own the entity's compliance with DORA, the associated Delegated Regulations and GDPR from a technology and security perspective, keeping the policy framework current and demonstrably implemented.
• Lead the technology and engineering function. ICT infrastructure, system architecture, releases and change management, ensuring stable, scalable and secure operations, and supporting the security of wallet and custody technology alongside the safeguarding function and group.
• Oversee penetration testing, vulnerability management, continuous monitoring and security event detection, and ensure secure backup, recovery and business continuity measures are in place and regularly tested.
• Own ICT third-party and cloud security from a technical perspective, and manage identity and access across systems (SSO, MFA, least-privilege, access reviews) as the technical backbone of the control environment.
• Work across Operations, Legal & Compliance, Risk and group technology, translating technical and security risk into clear terms for non-technical stakeholders, and report on security posture, incidents and ICT risk to the Senior Representative and Management Board, supporting internal and external audits.
• Build, develop and lead the Technology & Security team as the entity scales.

Requirements

• 7-10 years of experience in technology and information security, including leadership at Head or CISO level (or equivalent senior security role).
• Strong background in a regulated financial services, fintech, payments or crypto environment, ideally within the EU or Austria.
• Able to define what good looks like in this domain and operate autonomously, setting the standard rather than waiting for direction.
• Deep working knowledge of DORA, including incident classification and regulatory reporting, plus the associated ICT risk‑management requirements; familiarity with MiCAR and GDPR.
• Hands-on expertise across cyber security, cloud infrastructure, network and endpoint security, encryption and identity and access management.
• Understanding of crypto-asset custody technology such as wallet architecture, key management and signing security is a strong advantage.
• Experience managing ICT third-party providers and cloud security in a regulated context.
• Strong process and documentation discipline, able to turn a policy framework into demonstrable, audit-ready controls.
• Comfortable in a fast-moving, build-from-scratch environment with evolving regulatory requirements.
• Excellent leadership and communication skills, able to work across functions and report credibly to the board and regulators.
• Fluency in English is required; German is an advantage.

Why this role

Few roles offer this mix: the autonomy of building a function yourself, the safety of an established global group behind you, and the challenge of getting a regulated crypto platform right from day one. You will take local ownership of a strong regulatory framework, secure the systems that safeguard client assets, and build the technology function that the whole business runs on. If you are a senior technologist who wants genuine ownership, a regulated environment worth getting right, and the chance to build a high-performing team from the start, we would like to hear from you.