Information Security Governance Manager

<div>At EBANX, you’ll help expand access to payments and technology in some of the world’s most dynamic markets. We’re a <strong>unicorn-status fintech</strong>, <strong>AI-powered</strong>, and scaling fast across <strong>29 countries and counting</strong>.</div> <div><br>Our platform connects leading global companies to more than <strong>1 billion consumers</strong>, enabling seamless cross-border payments where it matters most. We build with purpose, move with speed, and create solutions that are both innovative and inclusive.</div> <div><br>If you’re looking to be part of a company that’s transforming the future of payments with <strong>clarity</strong>, <strong>ambition</strong>, and <strong>real-world impact</strong> — we’d love to meet you.</div> <div>&nbsp;</div> <div><br><strong>Your day-to-day impact:</strong></div> <ul> <li>Lead and develop a high-performing Information Security team focused on Risk Management and Security Governance;</li> <li>Drive the identification, assessment, prioritization, and treatment of information security risks, ensuring clear visibility and effective communication of risk exposure to senior leadership;</li> <li>Oversee the implementation, maintenance, and continuous improvement of compliance programs and certifications, including ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, and PCI DSS;</li> <li>Define and maintain the Information Security governance framework, including policies, standards, procedures, and control oversight;</li> <li>Coordinate internal and external audits, security assessments, and the execution of remediation and risk treatment plans;</li> <li>Define, monitor, and report security KPIs, KRIs, and program effectiveness metrics, providing actionable insights to business and executive stakeholders;</li> <li>Drive the organization's security awareness and culture strategy through training programs, phishing simulations, targeted campaigns, and employee engagement initiatives;</li> <li>Partner with cross-functional teams (Legal, Risk, HR, Engineering, Product, and Compliance) to embed security and risk management practices into business processes and strategic initiatives;</li> <li>Ensure security requirements are incorporated into new products, services, vendors, and third-party relationships from the earliest stages of engagement;</li> <li>Provide regular reporting on security governance, compliance status, risk landscape, and strategic initiatives to leadership and relevant governance forums;</li> <li>Foster a culture of accountability, continuous improvement, and security-first decision-making across the organization.</li> </ul> <div><br><strong>Must-