Lead the Incident Response squad.
Understands the business models, technologies, and cyber risk and threat landscape; fosters an inspiring work environment and open communication.
Acts as a coach to support team development and leads people management processes (recruitment, performance reviews, development, terminations, etc.).
Operates in a complex environment with multidisciplinary teams, facilitating interactions and keeping teams aligned to deliver solutions that match the company's strategic vision, security goals and user needs.
Lead Post‑Mortem meetings and lessons‑learned sessions, translating incidents into technical recommendations for Engineering and SOC teams.
Serve as the central command point during critical incidents, coordinating communication among technical teams, executives, and stakeholders.
Manage, mentor, and develop incident response analysts, ensuring the team is prepared to operate 24/7 (on-call rotation).
Manage budget, vendors, contracts, and licenses.
Actively collaborate with corporate security leadership to ensure that product/service roadmaps are aligned with company strategy and security objectives.

Experience in crisis and cyber incident management.
Experience in people management and leading information security teams.
Technical knowledge of processes, technologies, controls and best practices for prevention, detection, and response to cyber attacks.
Familiarity with industry frameworks such as MITRE ATT&CK (for mapping adversary tactics) and NIST SP 800-61.
Experience with SIEM, EDR/XDR, and SOAR tools.
Experience in the financial sector is a plus.

Fixed 14th and 15th salary payments.
Profit-sharing (based on seniority).
Health and dental plans with no copay.
Wellness programs via Wellhub (formerly Gympass): nutrition, psychology, occupational health, massage, running group, and local gym access.
Meal and grocery vouchers with flexible allocation between VA/VR cards, no copay.
Extended maternity and paternity leave.
Childcare or nanny allowance for children up to 6 years and 11 months.
Assistance for children with disabilities, with no age limit.
Life insurance.
Private pension plan with contributions up to 8% of salary.
Training platform — Sicredi Aprende — offering a variety of courses.
40-hour workweek — using a time-bank system.
Telework allowance (except for positions that are 100% on-site).

Information Security Coordination – Cyber Incident Response

Key skills