Senior Solution / Product Manager (Cybersecurity) Information Technology

Louis Dreyfus Company B.V.; São Paulo; Híbrido; BRL 80.000 - 120.000; Tempo integral

Resumo da oferta

An international firm in São Paulo seeks a Cybersecurity Lead to implement and manage cybersecurity strategies across Americas. Responsibilities include ensuring compliance with policies, documenting security controls, and providing Tier 3 support on incidents. Candidates should have relevant IT experience, knowledge of information security frameworks, and strong communication skills. A degree in technology and certifications like CISSP or CASP+ are preferred. The role may involve remote work with virtual teams.

Qualificações

• Relevant experience in IT infrastructure and/or architecture role.
• Experience in an information security role.
• Strong working knowledge of threat-modeling methodologies for new applications and services.
• Proven experience planning, deploying, and maintaining IT security technologies such as SIEM, EDR, DLP, IAM.
• Knowledge of agile concepts and DevSecOps approach.
• Hands-on experience with incident response and crisis management.
• In-depth knowledge of common information-security management frameworks (NIST, ISO, ITIL, CIS, CSA).
• Experience and desire to work in a multicultural and complex international environment.
• Experience with Microsoft technologies (Azure, M365, Defender, Sentinel) is a strong plus.
• Experience using architecture frameworks such as SABSA, Zachman, or TOGAF is a plus.
• Demonstrated ability to communicate cybersecurity and risk-related concepts to technical and non-technical audiences.

Responsabilidades

• Lead cybersecurity strategy implementation across Americas.
• Deliver cybersecurity solutions and manage them end-to-end.
• Ensure compliance with cybersecurity policies and standards.
• Enhance cybersecurity maturity in the cloud environment.
• Document security requirements and controls.
• Review technologies and make security recommendations.
• Serve as Tier 3 support for complex incidents.
• Lead cyber incident response and recovery actions.
• Report on cybersecurity program metrics to senior leaders.
• Influence stakeholders to embed cybersecurity in decision-making.

Conhecimentos

IT infrastructure experience

Information security expertise

Threat modeling methodologies

IT security technologies (SIEM, EDR, DLP, IAM)

Agile concepts knowledge

Incident response experience

Information-security management frameworks knowledge

Experience in multicultural environments

Microsoft technologies knowledge

Architecture frameworks knowledge

Communication skills

Formação académica

Degree in technology

Cybersecurity certifications (CompTIA CASP+, CISSP, etc.)

Descrição da oferta de emprego

Job Reference: JR

Professional Areas: Information Technology

Responsibilities

• Lead cybersecurity strategy implementation and support for all of America's time zones.
• Perform delivery of cybersecurity solutions and end‑to‑end management.
• Conduct and facilitate compliance with cybersecurity policies & standards for new technologies and projects.
• Lead cybersecurity maturity in our cloud environment (95% Microsoft Azure / 5% GCP).
• Document security requirements and controls for protecting information, systems, and technology assets.
• Review technologies, tools, services, and make recommendations from a security perspective.
• Serve as Tier 3 support for complex technical implementation and security incidents.
• Steer cyber incident response, crisis management and recovery actions during cyber events.
• Provide regular reporting on cybersecurity program, risk exposure, and maturity to senior leaders.
• Collaborate and influence stakeholders to embed cybersecurity into the decision‑making process.

Qualifications

• Relevant experience in IT infrastructure and/or architecture role.
• Experience in an information security role.
• Strong working knowledge of threat‑modeling methodologies for new applications and services.
• Proven experience planning, deploying, and maintaining IT security technologies such as SIEM, EDR, DLP, IAM.
• Knowledge of agile concepts and DevSecOps approach.
• Hands‑on experience with incident response and crisis management.
• In‑depth knowledge of common information‑security management frameworks (NIST, ISO, ITIL, CIS, CSA).
• Experience and desire to work in a multicultural and complex international environment.
• Experience with Microsoft technologies (Azure, M365, Defender, Sentinel) is a strong plus.
• Experience using architecture frameworks such as SABSA, Zachman, or TOGAF is a plus.
• Demonstrated ability to communicate cybersecurity and risk‑related concepts to technical and non‑technical audiences at various hierarchical levels, from board members to technical specialists.
• Degree in technology.
• Cybersecurity certifications such as CompTIA CASP+, CISSP, CCSP, CISM, SABSA or similar credentials are considered an advantage.

Preferred Qualifications

• Ability to work remotely with virtual teams.