IT & Security Officer — Kast

The Bitcoin Street Journal; Brasil; On-site; BRL 180,000 - 300,000; Full time

Job summary

KAST is seeking an experienced IT & Security Officer based in Brazil to serve as the statutory officer ensuring cybersecurity governance and regulatory compliance. You will report to the board and liaise with the Central Bank of Brazil (BCB) on policy, risk, and disclosure requirements.

The role requires deep knowledge of BCB resolutions 85/2021 and 520/2025, plus LGPD alignment. You will oversee cloud security, risk management, and security training across Brazilian operations, interacting with

Qualifications

• 3+ years in information security, GRC, or security leadership.
• 3-5+ years hands-on technical experience (sysadmin, network, devops, or IT support).
• Deep knowledge of Central Bank of Brazil (BCB) tech requirements (Resolutions 85/2021 and 520/2025).
• Based in Brazil and eligible to be appointed as a formal statutory officer.
• Experience in fintech or regulated financial institutions is preferred.
• Fluency in Portuguese and English for regulatory filings and leadership communication.

Responsibilities

• Statutory & Regulatory Ownership: serve as the statutory officer for cybersecurity policy and risk reporting to the BCB.
• Policy Governance & Compliance: design and enforce information security policies aligned with BCB resolutions and LGPD.
• Incident Escalation & Response: oversee detection, response, crises, and regulatory disclosure workflows.
• Third-Party & Cloud Risk Management: assess controls for key partners, SaaS vendors, and cloud providers.
• Cyber Risk & Board Reporting: monitor risk indicators and deliver reporting to the executive committee and board.
• Security Culture & Awareness: run company-wide security training and phishing simulations.
• Audit & Regulatory Examination Support: lead responses to IT audits and regulatory examinations.

Skills

Security governance

Regulatory compliance

BCB knowledge

Technical literacy

GRC

Portuguese & English

Vendor & cloud risk mgmt

Stakeholder reporting

Job description

KAST is seeking an experienced, Brazil-based IT & Security Officer to serve as our statutory officer responsible for cybersecurity governance. In this role, you will hold formal regulatory accountability before the Central Bank of Brazil (BCB), ensuring our technology, cloud, and security frameworks fully comply with local mandates (including Resolutions BCB 85/2021 and 520/2025). You will bridge high-level IT governance, risk management, and regulatory compliance while maintaining sufficient technical depth to challenge specialists, engineers, and third-party vendors.

• Company: Kast
• Sector: Blockchain
• Source: web3.career

Department Security & Platforms Employment Type Full Time Location Brazil Workplace type Onsite

Key Responsibilities

• Statutory & Regulatory Ownership: Serve as the nominated statutory officer responsible for cybersecurity policy, cyber risk management, and formal reporting to the Central Bank of Brazil (BCB).
• Policy Governance & Compliance: Design, implement, and enforce information security and IT governance policies aligned with BCB Resolutions 85/2021, 520/2025, and relevant local data privacy frameworks (LGPD).
• Incident Escalation & Response: Oversee cyber-incident detection, response protocols, crisis communication, and regulatory disclosure workflows, ensuring rapid containment and post-incident remediation.
• Third-Party & Cloud Risk Management: Evaluate and monitor security and compliance controls for key technology partners, critical SaaS vendors, and cloud infrastructure providers.
• Cyber Risk & Board Reporting: Monitor internal risk indicators, conduct regular vulnerability/threat posture assessments, and deliver actionable reporting to the executive committee and board.
• Security Culture & Awareness: Direct company-wide security training programs and phishing simulations to embed a robust risk-awareness culture across all Brazilian operations.
• Audit & Regulatory Examination Support: Lead responses to internal, external, and regulatory IT audits, acting as the primary interlocutor for technology examinations.

Requirements & Qualifications

• Security & Governance Experience: 3+ years in a dedicated information security, GRC (Governance, Risk & Compliance), or security leadership role managing frameworks and policies.
• Foundational Technical Background: 3-5+ years of hands-on technical experience (e.g., systems administrator, network engineer, software engineer, DevOps, or IT support analyst).
• Regulatory Acumen: Deep knowledge of Central Bank of Brazil (BCB) technology requirements - specifically Resolutions BCB 85/2021 and 520/2025 (and related amendments).
• Location & Legal Status: Based in Brazil and legally eligible to be appointed as a formal statutory officer (Diretor Estatutário) under Brazilian corporate and financial regulations.
• Fintech/Financial Sector Background: Demonstrated track record working in a regulated financial institution, payment institution (IP), or high-growth fintech.
• Technical Literacy: Strong technical fluency to critically evaluate architectures, challenge security engineers, and audit third-party vendor deliverables.
• Language Skills: Professional fluency in both Portuguese and English, capable of managing local regulatory filings and collaborating with international leadership.

About KAST

KAST is redefining stablecoin banking for global citizens, crypto professionals, Web3-native businesses, and high-inflation markets hungry for USD-backed banking. Backed by top-tier global investors and led by the ex-APAC CEO of Circle, our leadership team spans Circle, Airwallex, Revolut, Wise, Grab, Zoom, AWS, and leading OTC desks. We've scaled from zero to nearly a million users at ridiculous speed.