Senior Manager of Cybersecurity

Pluxee; São Paulo; On-site; BRL 300,000 - 420,000; Full time

Job summary

Pluxee is seeking a Senior Manager of Cybersecurity to lead the Brazil cybersecurity function, aligning local priorities with the global roadmap. You will oversee delivery, governance, and incident response while ensuring regulatory compliance and ISO 27001 maintenance across the Brazil scope.

You will collaborate with the DPO, Legal, and Compliance teams and engage with regional/global stakeholders to shape security strategies and defend business interests.

Qualifications

• Master's degree in Computer Science, Information Technology, or related field.
• Experience leading cybersecurity teams and programs.
• Knowledge of ISO 27001 and data protection regulations.
• Experience with regulatory compliance and DPO collaboration.

Responsibilities

• Lead the local cybersecurity team and align with global roadmap.
• Own country-level incident response and crisis exercises.
• Monitor, report KPIs, and ensure ISO 27001 maintenance in Brazil.
• Collaborate with DPO, Legal, Compliance on data protection.

Skills

Cybersecurity leadership

Team management

Regulatory compliance awareness

Risk assessment

Education

Master's degree in Computer Science or Information Technology

Job description

At Pluxee, we shape the world of employee benefits and engagement by bringing to life a personalized and sustainable employee experience, at work and beyond.

Permanent Regular

Job Description:

Pluxee is a global player in Employee Benefits and Engagement that operates in 28 countries. Pluxee helps companies attract, engage, and retain talent thanks to a broad range of solutions across Meal & Food, Well-being, Lifestyle, Reward & Recognition, and Public Benefits. Powered by leading technology and more than 5,600 engaged team members, Pluxee acts as a trusted partner within a highly interconnected B2B2C ecosystem made up of more than 500,000 clients, 37 million+ consumers, and 1.7 million+ merchants. Conducting business for more than 45 years, Pluxee is committed to creating a positive impact on local communities, supporting well-being at work for employees, and protecting the planet.

This role is responsible for leading the technology and payment strategy, operations, governance, and transformation agenda within a specific country. The role ensures alignment between global technology standards and local business priorities while overseeing technology delivery, operational stability, cybersecurity, infrastructure, workplace services, and business partnership activities.

The Senior Manager of Cybersecurity leads Pluxee's cybersecurity function in Brazil, ensuring the effective local implementation of the Group cybersecurity roadmap, policies, standards, methodologies, processes, and tools.

The role provides tactical leadership and decision-making for Brazil, protects local projects, applications, information, and business activities, and aligns country priorities with Pluxee's global cybersecurity strategy.

Also brings local business and regulatory needs into regional and global discussions, working through the Regional Cybersecurity Officer and relevant global teams to shape appropriate solutions.

What you'll be doing:

Cybersecurity & Business Responsibilities

• Ensure appropriate cybersecurity protection for local projects and applications by applying Group risk-assessment methodologies and coordinating technical security audits.
• Identify threats and coordinate or implement proportionate mitigation measures, including appropriate integration with the Security Operations Center and relevant use cases.
• Maintain visibility of local cybersecurity risks, anomalies, and vulnerabilities; coordinate remediation and elevate material exposures or delays.
• Implement and coordinate local adoption of Group cybersecurity policies, standards, methodologies, processes, and tools.
• Ensure and maintain ISO 27001 certification within the applicable local scope.
• Ensure compliance with applicable local cybersecurity regulations in collaboration with the DPO, Compliance, Safety, Legal, and other relevant stakeholders.
• Support Sales teams in presenting Pluxee's cybersecurity maturity to customers and prospects using accurate and approved information.
• Represent Pluxee in relevant external information-security communities.

People Management

• Lead and manage the local cybersecurity team, setting priorities aligned with the Group roadmap and Brazilian business requirements.
• Provide clear direction, develop accountability, and lead the local team and multidisciplinary stakeholders.

Incident Management & Operational Responsibilities

• Own country-level cybersecurity incident-response coordination, including internal and customer communications and appropriate escalation.
• Implement regular crisis exercises aligned with the Group's methodology and coordinate resulting improvement actions.
• Present cybersecurity risks, initiatives, remediation progress, and KPIs regularly to senior local management.
• Promote cybersecurity awareness among employees.

Cybersecurity & Data Protection

• Coordinate or implement controls based on risk and Group standards.
• Apply Group information-classification and protection requirements.
• Collaborate effectively with the DPO, Legal, and Compliance.
• Assess relevant supplier and third-party cybersecurity risks.

Data Protection & Regulatory Compliance

• Collaborate with the DPO, Compliance, and Legal to support compliance with applicable data-protection requirements.
• Ensure appropriate implementation of applicable local cybersecurity and regulatory requirements.

Health & Safety

• Collaborate with Safety and other relevant stakeholders where applicable to local cybersecurity requirements.

Performance & Reporting

• Monitor and report on cybersecurity risks, initiatives, remediation progress, incident response, crisis preparedness, ISO 27001 certification maintenance, regulatory compliance, awareness, and relevant cybersecurity KPIs in Brazil.
• Report to the Local IT Director through the direct reporting line and to the Regional Cybersecurity Officer through the dotted-line reporting relationship.
• Lead the local cybersecurity team.

You’re a match

Master's degree in Computer Science, Information Technology, or a rel