Information Security Manager

Have you ever thought about working at Ipiranga? At Ipiranga, we believe that people with passion in their eyes, who are authentic and engaged, are our competitive advantage! We act with passion and purpose, putting the customer at the center of our decisions. We value autonomy, openness, and transparency, as we are certain that truth and respect strengthen relationships and generate trust. We provide our team with a flexible environment of collaboration and well-being for full personal and professional fulfillment. Our purpose is “Fueling life in motion”. Learn more about us: https://portal.ipiranga/wps/portal/ipiranga/a-ipiranga/institucional/carreiras/ Read our ESG report: https://portal.ipiranga/wps/portal/ipiranga/a-ipiranga/institucional/sustentabilidade What do we expect from you?· We are customer-focused and integrity is our competitive advantage #TheCustomerIsTheReason· Difficult conversations strengthen our relationships #YourVoiceHasValue· Autonomy, responsibility, and non-conformity are essential #LeaveItToMe· Processes and Discipline change our results #EfficiencyChangesTheGame· We are secure, plural, collaborative, and light #WeAreIpirangaResponsibilities and attributionsResponsibilities and attributions:Responsibilities and attributions:Develop and implement the information security strategy aligned with business objectives.Crisis management related to Information Security. Identify, assess, and manage information security risks, including the creation of mitigation plans.Ensure that the company is in compliance with relevant regulations, such as GDPR, HIPAA, ISO 27001, among others.Lead a team of information security professionals (Blue team, Red team, and GRC) providing guidance, training, and support.Supervise and act in the detection of cyber threats, security incidents, and forensic investigations.Implement information security policies and practices.Develop business continuity and disaster recovery plans to ensure resilience in case of security incidents.Promote security awareness for all levels of the organization and ensure that everyone understands their responsibilities regarding information security.Main Challenges:Vendor management regarding compliance with SLAs and KPIs - control and report performance indicators.Perform and support periodic audit processes (e.g., SOX).Ensure compliance with budget and forecast and achieve defined savings goals.Ensure that ITSM standards are executed (e.g., changes processes).Vulnerability management, access control (IDM), Antivirus, and related tools.Requirements and qualificationsRequirements and qualificationsPrerequisite:Education: Academic background in Information Technology, Information Security, or a related field (certifications such as CISSP, CISM, CISA are advantageous).Vast experience in information security, including leadership in CISO roles or similar executive levels.Deep knowledge of information security regulations and compliance standards.Leadership Skills: Proven ability to lead and manage teams, define goals, priorities, and make strategic decisions.Communication: Excellent communication skills to interact with technical teams, management, and non-technical stakeholders.Problem Solving: Ability to identify and solve problems effectively, often under pressure.Capacity to lead teams and create a solid security culture.Adaptability: Ability to adapt quickly to technological and business changes.Travel: Availability for travel.Advanced/Fluent English (reading, speaking, and writing).Additional informationWhat do we offer you? 🕗 Flexible schedule💙 Disability child allowance💰 Variable Remuneration Program🏦 Private Pension💸 Seniority bonus🧘🏻‍♀️ Online Therapy & Nutritional Guidance👶🏻 Birth basket 📚 Corporate university 🏭 Market benefits: Gympass, VR/VA, VT, Health and Dental Plan, Life insurance.So, are you up for the challenge? Then apply for this position and don't leave this opportunity for later! We believe that diversity favors an innovative environment! We have open doors for people with a desire for transformation through work and who are willing to contribute to the growth and evolution of the company.