Staff GRC Program Manager

Amit érdemes tudni

• Remote · Ismeretlen
• Távmunka, de a magyarországi jogosultság nem egyértelmű.
• Szint: Lead
• Fizetés: nem közölt

Helyszín és jogosultság

Távmunka, de a magyarországi jogosultság nem egyértelmű.

São Paulo, Brazil

Megbízhatóság: 48%. A végső döntés a munkáltatóé – mindig olvasd el az eredeti hirdetést.

Pozíció

At Ripple, we’re building a world where value moves like information does today. It’s big, it’s bold, and we’re already doing it. Through our crypto solutions for financial institutions, businesses, governments and developers, we are improving the global financial system and creating greater economic fairness and opportunity for more people, in more places around the world. And we get to do the best work of our career and grow our skills surrounded by colleagues who have our backs.

If you’re ready to see your impact and unlock incredible career growth opportunities, join us, and build real world value.

THE WORK:

Ripple is expanding its Information Security function and is seeking an experienced Information Security professional to join us in building a world-class Information Security program.

This is a critical role based in our Brazil entity, integral to establishing Ripple's local operational presence and governance to operate as a Sociedade Prestadora de Serviços de Ativos Virtuais (SPSAV/VASP). This position will be key in building and delivering a strong information security and ICT risk program locally, supporting Ripple’s expansion of regulated digital asset activities across Latin America.

WHAT YOU’LL DO:

Serve as the operational lead for cybersecurity governance, risk management, and compliance in Brazil. Work directly with local leadership on the entity's information security program and incident-response capabilities.

Prepare, coordinate, and directly support local leadership in regulatory authorization review, ongoing supervisory engagements, and examinations.

Provide periodic updates to Ripple Brazil's board and management on the InfoSec program, ICT risk posture, and regulatory developments.

Maintain compliance with Brazilian regulatory and security frameworks relevant to virtual asset service providers, such as central bank cybersecurity and data protection requirements.

Map new and evolving guidance issued by the BCB, COAF, and ANPD to Ripple's internal security controls library to identify gaps and enhancement opportunities.

Scope, plan, and independently conduct periodic technical control testing to validate the effectiveness of information security controls across our cloud, infrastructure, and application environments.

Directly access systems to pull technical evidence (logs, system settings, access reports) for control testing, audits, and independent assurance reviews.

Collaborate with global InfoSec teams to develop, ma

Rövidített kivonat. A teljes leírás és a jelentkezés a munkáltató oldalán érhető el.