IT Security & Compliance Lead (São Paulo, BR)

1 hour, 29 minutes ago
Full-time
Lead
Cybersecurity
B Lab

B Lab

B Lab is a nonprofit network that spearheads the B Corp movement, aiming to reshape the global economy to prioritize the well-being of people, communities, and the planet through the certification of businesses committed to social and environmental per...

Diversified Consumer Services
51-250
Founded 2006

Description

  • Conduct security audits, risk assessments, vendor reviews, penetration testing, and vulnerability scanning while maintaining a prioritized risk register.
  • Establish and monitor a network-wide security baseline aligned with a recognized framework such as ISO/IEC 27001:2022.
  • Define access-control standards covering MFA, SSO, least privilege, and joiner/mover/leaver processes across platforms including Google Workspace and Salesforce.
  • Partner with regional IT teams on endpoint, device, cloud, SaaS, and zero-trust security.
  • Own and maintain information security, backup and recovery, and incident management policies and procedures.
  • Lead the KnowBe4 security awareness program, including training, phishing simulations, and reporting.
  • Maintain the incident response plan and coordinate security incidents with Legal, Communications, and affected regions.
  • Support data protection compliance, business continuity, disaster recovery, audits, due diligence, and regulatory inquiries.
  • Advise engineering and data teams on secure-by-design practices and safe AI adoption.
  • Report security posture and maturity metrics to Technology leadership and drive remediation of high-priority gaps.

Requirements

  • 3+ years of experience in information security, IT governance, risk and compliance, or a closely related field.
  • Strong understanding of networking, cybersecurity, and regulatory technology compliance.
  • Strong understanding of at least one recognized cybersecurity framework.
  • Experience conducting security audits, risk assessments, and vendor security reviews.
  • Working knowledge of global data protection regulations such as GDPR, UK GDPR, and LGPD.
  • Experience developing or maintaining incident response, business continuity, and disaster recovery plans.
  • Hands-on familiarity with cloud and SaaS security, especially Google Workspace administration and identity and access management.
  • Ability to explain security risks to nontechnical colleagues and write clear policies.
  • Must have unrestricted Brazilian work authorization, reside in Brazil, and live within commuting distance of São Paulo.
  • Preferred: experience in nonprofit, federated, multi-entity, merger, or consolidation environments; Salesforce security, KnowBe4, endpoint management, or Google Vault experience; collaborative systems-thinking approach.

Benefits

  • Annual salary of R$212,960–R$261,030, excluding the 13th salary.
  • Brazilian statutory sick and other leave under a CLT contract.
  • Remote-first workplace with a company-provided laptop.
  • Paid time off during organization-wide wellness closures.
  • After one year, 40 hours of paid professional development time and paid volunteer leave.
  • One-time home-office setup allowance.
  • Potential monthly home-office, food, and health-insurance allowances.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Information Security Engineer

Edmentum 1K-5K Diversified Consumer Services

Edmentum is seeking a Remote First Information Security Engineer to protect the systems, data, and learning platforms supporting millions of students while strengthening security operations and compliance.

Agile Penetration Testing
2 hours, 14 minutes ago

Regulatory Affairs Specialist

MANSCAPED 51-250 Personal Products

MANSCAPED is seeking a Regulatory Affairs Specialist to support the Senior Manager, Regulatory by maintaining global compliance for its cosmetics, personal care, grooming, electrical, battery, accessory, and packaging products.

2 hours, 14 minutes ago

ABA Director of Credentialing

Coyne & Associates 51-250 Diversified Consumer Services

The Director of Credentialing & Provider Enrollment will lead credentialing, enrollment, contracting, compliance, and accreditation operations for a growing ABA therapy organization serving children and adolescents across four affiliated companies in 10 states.

Salesforce
2 hours, 29 minutes ago

Compliance Regulatory Specialist

RecargaPay 251-1K Capital Markets

RecargaPay is seeking a Regulatory Compliance Specialist to support its financial and payment operations by interpreting Central Bank of Brazil and National Monetary Council requirements, translating them into business and control measures, and overseeing their effective implementation.

2 hours, 29 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers