Back to jobs
New

Information Security Governance Manager

Curitiba | On-site
At EBANX, you’ll help expand access to payments and technology in some of the world’s most dynamic markets. We’re a unicorn-status fintech, AI-powered, and scaling fast across 29 countries and counting.

Our platform connects leading global companies to more than 1 billion consumers, enabling seamless cross-border payments where it matters most. We build with purpose, move with speed, and create solutions that are both innovative and inclusive.

If you’re looking to be part of a company that’s transforming the future of payments with clarity, ambition, and real-world impact — we’d love to meet you.
 

Your day-to-day impact:
  • Lead and develop a high-performing Information Security team focused on Risk Management and Security Governance;
  • Drive the identification, assessment, prioritization, and treatment of information security risks, ensuring clear visibility and effective communication of risk exposure to senior leadership;
  • Oversee the implementation, maintenance, and continuous improvement of compliance programs and certifications, including ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, and PCI DSS;
  • Define and maintain the Information Security governance framework, including policies, standards, procedures, and control oversight;
  • Coordinate internal and external audits, security assessments, and the execution of remediation and risk treatment plans;
  • Define, monitor, and report security KPIs, KRIs, and program effectiveness metrics, providing actionable insights to business and executive stakeholders;
  • Drive the organization's security awareness and culture strategy through training programs, phishing simulations, targeted campaigns, and employee engagement initiatives;
  • Partner with cross-functional teams (Legal, Risk, HR, Engineering, Product, and Compliance) to embed security and risk management practices into business processes and strategic initiatives;
  • Ensure security requirements are incorporated into new products, services, vendors, and third-party relationships from the earliest stages of engagement;
  • Provide regular reporting on security governance, compliance status, risk landscape, and strategic initiatives to leadership and relevant governance forums;
  • Foster a culture of accountability, continuous improvement, and security-first decision-making across the organization.

Must-haves to shine in this role:
  • Proven experience leading teams, with the ability to motivate, coach, and develop people;
  • Strong expertise in Information Security Risk Management, including risk identification, assessment, prioritization, treatment, and executive-level reporting;
  • Deep knowledge of Information Security Governance and Compliance, including risk management, internal controls, and security frameworks;
  • Hands-on experience with global standards and certifications such as ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, and PCI DSS;
  • Strong communication skills, with the ability to translate technical risks into business impacts for both technical and executive audiences;
  • Proven track record managing audits, assessments, and external regulatory demands;
  • Analytical mindset with a business-oriented approach, connecting security decisions, risk exposure, and compliance requirements with strategic goals;
  • Experience designing and running awareness programs that go beyond checklists and truly shift culture;
  • Passion for innovation and AI-driven efficiency, with a proactive approach to leveraging AI and automation to optimize processes, reduce operational overhead, and enhance operational effectiveness;
  • Advanced English — you’ll often interact with international stakeholders.

Bonus points if you have:
  • Advanced certifications in Information Security, Risk Management, or Governance, such as ISO/IEC 27001 Lead Auditor/Lead Implementer, CRISC, CISM, CISSP, or similar;
  • Experience working in global or multicultural environments, with distributed teams and international operations;
  • Familiarity with additional governance and risk frameworks such as NIST CSF, COBIT, SOX, or third-party risk management programs;
  • Knowledge of cloud security standards (e.g., AWS, GCP, Azure) and secure development practices;
  • Hands-on experience with awareness platforms (e.g., KnowBe4, Wombat, MetaCompliance) and phishing simulation tools;
  • Experience presenting security and risk topics to executive committees, boards, or senior leadership forums;
  • Previous involvement in security incident response, including coordination and post-incident reviews;
  • Passion for building a security culture, storytelling, and engaging people in non-technical areas;
  • Hands-on experience using Artificial Intelligence (AI) or Machine Learning to automate governance processes, enhance risk analysis, streamline controls management, or improve compliance monitoring.

 

EBANX offers:

  • WAVES Program: Annual bonuses based on the company’s performance.

  • Meal/Food Allowance: Credit provided on a flexible benefits card.

  • EBANX Education: Financial support for undergraduate, graduate, and MBA programs to support your professional growth.

  • EBANX Skills: Budget dedicated to workshops, courses, and certifications to encourage your continuous development.

  • Language Classes: Spanish, English, and Portuguese lessons for your personal and professional development.

  • EBANX Health: Comprehensive medical and dental plans fully covered for the employee, plus subsidies for dependents to take care of your and your family’s well-being.

  • EBANX Family: Childcare assistance, extended parental leave for caregivers, and support programs for pregnant employees and children.

  • Life Insurance: Fully paid by EBANX.

  • Transportation: Parking assistance or transportation vouchers, depending on your needs.

  • EBANX Flexible: A special day off on your birthday, semi-flexible working hours (8 hours/day, Monday to Friday), and year-end recess between Christmas and New Year’s without affecting your vacation days.

  • EBANX Play: Well-being program including access to Wellhub, e-Sports, and partnerships with SESC.

  • Blue Club: Exclusive discounts at bakeries, restaurants, stores, courses, and more.

 

Follow us on LinkedIn and check out our Instagram to learn more about the #ebanxlife.

Create a Job Alert

Interested in building your career at EBANX? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Phone
Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf


Education

Select...
Select...

Select...

By applying for jobs at EBANX, you declare that you have read our Privacy Notice and agree to the use of your data by EBANX. *

Your agreement with our Notice is fundamental for EBANX to take all the necessary steps to start the application process, such as contacting you, scheduling and conducting interviews, and registering you as a candidate in our systems.

EBANX will store your data for the duration of the application process and, after it has ended, for a further 5 years. If you wish to have your data deleted before then, please contact EBANX via our Privacy Portal.

Select...
Select...
Select...
Select...

We believe it is possible to create a diverse, equal and inclusive environment. That is why we have prepared a questionnaire that addresses demographic issues by collecting sensitive personal data. The information collected is part of our efforts to monitor our evolution, so filling it out is optional, but we invite you to do so. Filling in or refusing to provide these details will in no way affect your hiring process, but it will help us to get to know the people who apply to EBANX better. Check out this link for more information to support your decision on whether or not to provide consent for the processing of this data. 


By selecting the "Agree" option in this section, you register your free, express, informed, and unequivocal expression of awareness about the processing of sensitive data and consent to the processing of this data. This means that you agree to the legal entity EBANX Ltda., CNPJ 13.236.697/0001-46, headquartered at Rua Marechal Deodoro, 630, Praça San Marco, CEP 80010-010, Centro, Curitiba, PR, processing your personal data under the terms listed.

Select...
Select...
Select...
Select...
Select...
Select...