Oficial de Cumplimiento (CISO con certificación CISA)

About the role

The Compliance Officer (CISO) will ensure that the organization operates in line with regulatory frameworks, industry standards, and internal security policies. Acting as a bridge between technical teams and business leadership, the role aligns security initiatives with strategic objectives and legal requirements.

Key responsibilities

• Manage the security governance program, including policies, procedures, and standards.
• Conduct periodic risk assessments and maintain the risk register.
• Ensure compliance with ISO 27001, NIST CSF, PCI‑DSS, GDPR, and SOC 2.
• Coordinate and support internal and external security audits.
• Develop Business Continuity (BCP) and Disaster Recovery (DRP) plans.
• Oversee third‑party (vendor) risk management.
• Prepare compliance and risk reports for senior management and the board.
• Lead organization‑wide security awareness programs.
• Respond to regulators and supervisory bodies.
• Maintain data‑processing records and privacy documentation (GDPR/LGPD).

Required profile

• University degree in Computer Science, Industrial Engineering or a related field.
• Mandatory CISA certification.
• At least 3 years of experience in a similar compliance or security leadership role.
• Additional certifications are a plus: CISSP, GISP, CISMC, CRISC, CGEIT, ISO 27001 Lead Implementer.

Required skills