Business Information Security Officer (BISO)

Vaga não está no LinkedIn

🔥 0 minutos atrás

Candidatar-se

Encontrar Vagas Remotas Similares

Receber Emails de Vagas Remotas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Digibee

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2017

☁️ SaaS

🔌 API

🏢 Corporativo

💰 $60.492.408 Series B - Digibee em 2023-06

SaaS • API • Enterprise

A Digibee é uma plataforma de integração e automação nativa da nuvem que ajuda as empresas a conectar aplicativos, sistemas legados, dados e IA. Ela fornece ferramentas visuais/low-code para criar integrações, orquestrar fluxos de trabalho, implantar agentes e gerenciar a conectividade MCP/IA com observabilidade, segurança e escalabilidade serverless integradas. A Digibee é oferecida como uma plataforma SaaS para equipes de TI, desenvolvedores e arquitetos acelerarem a transformação digital, modernizarem sistemas centrais e automatizarem processos críticos de alta demanda.

Descrição

• Partner with leaders, product owners, and engineering teams to identify, assess, and prioritize information security risks, translating technical threats into business impact and actionable mitigation strategies. • Serve as the primary security point of contact, providing strategic guidance on security architecture, secure-by-design principles, threat modeling, and risk acceptance decisions for new products, features, and technology investments. • Lead security risk assessments for major business initiatives & projects, M&A activities, third-party integrations, and cloud migrations, leading certifications (SOC 2, PCI-DSS), regulatory & client requirements and internal security policies. • Drive the implementation and continuous improvement of security controls, governance frameworks, and KPIs/KRIs, reporting on the security posture of business units to executive leadership and relevant risk committees. • Champion security awareness and culture across business units by leading training initiatives, tabletop exercises, and incident response simulations, while also supporting real incident response coordination between business stakeholders and the central security teams.

🎯 Requisitos

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Systems, Engineering, or a related field. Relevant certifications such as CISSP, CISM, CRISC, CCSP, CISA, or cloud-specific security certifications (AWS/Azure/GCP) are highly desirable. • English language, with the ability to communicate security concepts clearly to both technical and non-technical audiences, including executive leadership. • Strong experience (8+ years) in information security, with at least 3 years in security consulting, security architecture, or senior GRC role, ideally supporting product-driven or cloud-native organizations. • Experience in security frameworks and standards, risk management methodologies, threat modeling, secure SDLC practices, and cloud security architecture. • Familiarity with Product and Cloud Engineering companies, including modern development practices such as DevSecOps, CI/CD pipelines, microservices, Kubernetes, infrastructure-as-code, and API security, along with an understanding of how to embed security without slowing down delivery. • Ability to work independently and manage multiple projects/roles simultaneously, balancing competing priorities across business units while maintaining strong stakeholder relationships and a strategic, outcomes-oriented mindset.

🏖️ Benefícios

• N/A