Tech Manager - Cyber Security at Jobgether SRL in Brazil, BR

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Tech Manager - Cyber Security in Brazil.

This role is a strategic leadership position responsible for shaping and executing the cybersecurity vision of a fast-growing technology company in the mobility and travel space. You will lead critical security domains including Identity and Access Management, Application Security, Security by Design, and Fraud Prevention, ensuring robust protection of systems, data, and revenue streams. Acting as both a technical and executive leader, you will define security strategy aligned with business goals while driving secure development practices across engineering and product teams. The position requires strong cross-functional collaboration with engineering, product, compliance, and executive leadership. You will also oversee incident response, regulatory compliance, and risk governance in a dynamic cloud-native environment. This is a high-impact role where security directly supports business growth, trust, and scalability.

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Tech Manager - Cyber Security in Brazil.

This role is a strategic leadership position responsible for shaping and executing the cybersecurity vision of a fast-growing technology company in the mobility and travel space. You will lead critical security domains including Identity and Access Management, Application Security, Security by Design, and Fraud Prevention, ensuring robust protection of systems, data, and revenue streams. Acting as both a technical and executive leader, you will define security strategy aligned with business goals while driving secure development practices across engineering and product teams. The position requires strong cross-functional collaboration with engineering, product, compliance, and executive leadership. You will also oversee incident response, regulatory compliance, and risk governance in a dynamic cloud-native environment. This is a high-impact role where security directly supports business growth, trust, and scalability.

Accountabilities:

• Lead and develop cybersecurity teams across IAM, Security by Design, and Fraud & Revenue Protection, fostering technical excellence and professional growth.
  • Define and execute the overall cybersecurity strategy aligned with business objectives, product roadmap, and organizational risk appetite.
  • Establish and govern IAM frameworks, including identity lifecycle management, RBAC/ABAC, MFA, SSO, and access review policies.
  • Promote and implement Security by Design and Secure SDLC practices, including threat modeling, secure architecture reviews, and CI/CD security gates.
  • Lead fraud prevention and revenue protection strategies, defining rules, models, and KPIs to reduce financial losses and mitigate risks.
  • Define and monitor security OKRs, KPIs, and KRIs, reporting insights and progress to executive leadership.
  • Manage security budgets, vendors, and strategic partnerships to ensure efficiency, ROI, and scalability of operations.
  • Support audits, compliance, and certifications such as LGPD, ISO 27001, SOC 2, and PCI-DSS where applicable.
  • Lead incident response and crisis management efforts, ensuring structured communication and continuous improvement.
  • Stay updated on emerging threats, technologies, and industry best practices, driving innovation and security culture across the organization.

Requirements:

    - Proven experience leading cybersecurity teams, with hands-on leadership in IAM, Application Security, and Fraud Prevention domains.
    - Strong background in SaaS or technology environments with cloud platforms (AWS, Azure, or GCP) and modern architectures (microservices, APIs, containers).
    - Deep knowledge of DevSecOps practices, Secure SDLC, and security integration in CI/CD pipelines.
    - Solid understanding of security frameworks and standards such as ISO 27001, ISO 27701, NIST, CIS Controls, OWASP, PCI-DSS, and LGPD.
    - Experience with threat modeling, risk analysis, and security governance at scale.
    - Strong ability to define and track KPIs, KRIs, and OKRs, with executive-level reporting experience.
    - Excellent communication, leadership, and stakeholder management skills across technical and business teams.
    - Strategic mindset with strong analytical and data-driven decision-making abilities.
    - Intermediate to advanced English proficiency for technical documentation and global collaboration.
    - Nice to have: certifications such as CISSP, CISM, CRISC, CCSP, AWS Security Specialty, or CFE.
    - Nice to have: experience with IAM, AppSec, SIEM/SOAR, cloud security tools, or fraud prevention platforms.

Benefits:

        - Competitive compensation package aligned with market standards.
        - Meal or food allowance and home office support.
        - Comprehensive health and dental insurance plans.
        - Wellness programs including mental health support and fitness platform access.
        - Life insurance coverage and extended parental leave policies.
        - Education and professional development support, including training and learning platforms.
        - Flexible work environment with remote work options.
        - Additional benefits such as day off on birthdays and vacation eligibility after 6 months.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1