Senior Manager de Cibersegurança
Pluxee · São Paulo, Brazil
**Pluxee** is a global player in Employee Benefits and Engagement that operates in 28 countries. Pluxee helps companies attract, engage, and retain talent thanks to a broad range of solutions across Meal \& Food, Well\-being, Lifestyle, Reward \& Recognition, and Public Benefits. Powered by leading technology and more than 5,600 engaged team members, Pluxee acts as a trusted partner within a highly interconnected B2B2C ecosystem made up of more than 500,000 clients, 37 million\+ consumers, and 1\.7 million\+ merchants. Conducting business for more than 45 years, Pluxee is committed to creating a positive impact on local communities, supporting well\-being at work for employees, and protecting the planet. This role is responsible for leading the technology and payment strategy, operations, governance, and transformation agenda within a specific country. The role ensures alignment between global technology standards and local business priorities while overseeing technology delivery, operational stability, cybersecurity, infrastructure, workplace services, and business partnership activities. The Senior Manager of Cybersecurity leads Pluxee’s cybersecurity function in Brazil, ensuring the effective local implementation of the Group cybersecurity roadmap, policies, standards, methodologies, processes, and tools. The role provides tactical leadership and decision\-making for Brazil, protects local projects, applications, information, and business activities, and aligns country priorities with Pluxee’s global cybersecurity strategy. Also brings local business and regulatory needs into regional and global discussions, working through the Regional Cybersecurity Officer and relevant global teams to shape appropriate solutions. **🚀 What you'll be doing:** Cybersecurity \& Business Responsibilities * Ensure appropriate cybersecurity protection for local projects and applications by applying Group risk\-assessment methodologies and coordinating technical security audits. * Identify threats and coordinate or implement proportionate mitigation measures, including appropriate integration with the Security Operations Center and relevant use cases. * Maintain visibility of local cybersecurity risks, anomalies, and vulnerabilities; coordinate remediation and escalate material exposures or delays. * Implement and coordinate local adoption of Group cybersecurity policies, standards, methodologies, processes, and tools. * Ensure and maintain ISO 27001 certification within the applicable local scope. * Ensure compliance with applicable local cybersecurity regulations in collaboration with the DPO, Compliance, Safety, Legal, and other relevant stakeholders. * Support Sales teams in presenting Pluxee’s cybersecurity maturity to customers and prospects using accurate and approved information. * Represent Pluxee in relevant external information\-security communities. People Management * Lead and manage the local cybersecurity team, setting priorities aligned with the Group roadmap and Brazilian business requirements. * Provide clear direction, develop accountability, and lead the local team and multidisciplinary stakeholders. Incident Management \& Operational Responsibilities * Own country\-level cybersecurity incident\-response coordination, including internal and customer communications and appropriate escalation. * Implement regular crisis exercises aligned with the Group’s methodology and coordinate resulting improvement actions. * Present cybersecurity risks, initiatives, remediation progress, and KPIs regularly to senior local management. * Promote cybersecurity awareness among employees. Cybersecurity \& Data Protection * Coordinate or implement controls based on risk and Group standards. * Apply Group information\-classification and protection requirements. * Collaborate effectively with the DPO, Legal, and Compliance. * Assess relevant supplier and third\-party cybersecurity risks. Data Protection \& Regulatory Compliance * Collaborate with the DPO, Compliance, and Legal to support compliance with applicable data\-protection requirements. * Ensure appropriate implementation of applicable local cybersecurity and regulatory requirements. Health \& Safety * Collaborate with Safety and other relevant stakeholders where applicable to local cybersecurity requirements. Performance \& Reporting * Monitor and report on cybersecurity risks, initiatives, remediation progress, incident response, crisis preparedness, ISO 27001 certification maintenance, regulatory compliance, awareness, and relevant cybersecurity KPIs in Brazil. * Report to the **Local IT Director** through the direct reporting line and to the **Regional Cybersecurity Officer** through the dotted\-line reporting relationship. * Lead the local cybersecurity team. **🌟 You’re a match** * Master’s degree in Computer Science, Information Technology, or a related field. * CISSP or an equivalent certification is desirable. * Professional working proficiency in **English**