Senior DPO & CISO managing information security and data privacy at Rox Partner consultancy. Leading cybersecurity strategy and compliance with ISO 27001 and LGPD.
Responsibilities
Lead the company's Information Security and Cybersecurity strategy.
Maintain and evolve the ISMS in accordance with ISO/IEC 27001.
Act as the Data Protection Officer (DPO) before the ANPD, ensuring compliance with the LGPD.
Define, review and ensure adherence to security and privacy policies.
Plan and conduct internal audits and support external audits.
Design, operate and evolve the SOC (internal or outsourced).
Define and execute monitoring, vulnerability management and incident response processes.
Act directly on critical incidents (log analysis, containment, eradication and recovery).
Manage security tools such as SIEM, EDR/XDR, Firewall, WAF, IAM, DLP and CASB.
Conduct DPIA/RIPD and manage privacy incidents.
Serve as the technical and executive interface with clients, partners, auditors and regulatory bodies.
Requirements
Degree in IT, Information Security, Engineering or related fields
Solid experience in Information Security and Cybersecurity
Mandatory knowledge of ISO/IEC 27001 and LGPD
Experience with SOC, SIEM, EDR/XDR and incident response
Knowledge of cloud security (AWS, Azure or GCP)
Experience with NIST, CIS and MITRE ATT&CK frameworks
Certifications such as ISO 27001 Lead, CISSP, CISM, CDPO, CEH, GCIH
Experience with audits and regulated environments
Hands-on profile with strategic and executive vision
Benefits
Hybrid work – Monday to Friday (9:00 AM to 6:00 PM)
Home-office allowance – R$300.00 per month credit on an iFood card for meals/food
Birthday – Rox rewards you with a gift card and a day off to celebrate your special day
Blog – We encourage knowledge sharing; for every 2 approved articles on the Rox blog you publish, you earn a day off
Courses – Full access to RoxSchool, Alura, Pluralsight and O'Reilly for books and talks
Certifications – Certification reimbursement up to R$300.00 (TECHNOLOGY) plus a R$300.00 bonus per certification achieved from these providers
Psychologist support – Two psychotherapy sessions monthly covered by ROX with partner psychologists
Feedz partnership – Gamified platform to improve communication and track sentiment, engagement, feedback, IDP and performance
WellHub (Gympass) – Partnership with gyms and health & wellness apps
Head of Cybersecurity tools leading a team and overseeing development and operations of security systems at Telia. Engaging with stakeholders to ensure compliance and effective agile delivery planning.
Manager of corporate security operations overseeing site security at QVC's offices and corporate environments. Ensuring compliance and managing teams across multiple regions in a hybrid role.
Lead Global Security Systems for QVC ensuring reliability and performance across all regions. Oversee integrations of new technologies and manage security initiatives with IT and cross - functional teams.
Global Security Intelligence & Threat Analyst at QVC, gathering intelligence to protect global operations through data analysis and collaboration. Involves tracking risks and supporting leadership decisions.
Assistant in safety maintenance supporting the implementation of security measures and managing store maintenance tasks. Focused on ensuring safety protocols are followed in Castorama's Angoulême location.
Head of Security for G+D Group Services defining and implementing security strategies. Collaborating on integrated security risk management and incident management.
Postdoctoral Research Fellow in Cyber Security driving research impacting cyberpsychology and resilience. Collaborating with industry experts and contributing to educational supervision in a vibrant research group.
Information Security Intern assisting with components of Benjamin Moore's information security program. Responsibilities include documentation, compliance monitoring, and forensic analysis.
Specialist in Information Security at Lojas Renner responsible for monitoring and addressing security incidents. Collaborating with various teams on data protection strategies and leadership preparation.