Information Security Architect

🕒 September 4

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 34%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GFT Technologies

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1987

💼 Consulting

🛡️ Insurance

🔒 Cybersecurity

Consulting • Insurance • Cybersecurity

GFT Technologies is a leading technology and digital transformation company that specializes in providing advanced solutions for consent management and data privacy compliance. Their flagship product, Cookiebot, enables businesses to automate user consent collection efficiently, ensuring adherence to complex privacy regulations such as GDPR and CCPA. GFT's solutions facilitate seamless integration into existing digital infrastructures, helping over 600,000 customers globally manage user data transparently and securely.

📋 Description

• Define and implement security architectures based on Defense in Depth and Zero Trust. • Assess the risks of new integrations, hybrid environments, multicloud environments, and SaaS solutions; issue technical assessments and document residual risks. • Conduct threat modeling using STRIDE, DREAD, OWASP Top 10, and MITRE ATT&CK. • Ensure Security by Design and Privacy by Design throughout the development lifecycle. • Design and audit IAM and PAM solutions, including SSO, MFA, OIDC, SAML 2.0, RBAC, and secure credential management. • Validate DevSecOps practices by integrating SAST, DAST, SCA, IaC Security, and Secrets Detection into CI/CD pipelines. • Define encryption standards for data in transit and at rest and support HSM and cryptographic key management processes. • Ensure compliance with Brazil’s LGPD, Banking Secrecy Law, PCI DSS, and Central Bank of Brazil regulations, including CMN 4.893, BCB 85, and CMN 5.274. • Act as the technical lead for impact assessments, access management, penetration tests, and security assessments. • Approve systemic cyber risks.

🎯 Requirements

• Zero Trust Security Frameworks and Architecture (NIST SP 800-207). • NIST SP 800-53. • OWASP ASVS 4.0, MASVS, MASTG, and API Security Top 10. • CIS Controls. • Application Security Architecture. • Vulnerability Management. • Knowledge of CrowdStrike Falcon, Trend Micro Vision One, and QualysGuard. • Knowledge of IBM Security Guardium and Securiti.ai. • Knowledge of CyberArk, BeyondTrust, and Keycloak. • Knowledge of Guardsquare and MobSF. • Knowledge of Palo Alto NGFW, Prisma Access, Zscaler, Cloudflare WAF, and Apigee X. • Knowledge of MITRE Caldera, Burp Suite Professional, Cobalt Strike, MISP, Shodan, and ANY.RUN. • Knowledge of Microsoft Entra ID, Entra Connect, and Intune. • Knowledge of Splunk, Splunk Enterprise Security, and Wazuh. • Preferred qualifications: cloud security, security architecture, and security compliance certifications; experience with due diligence and continuous monitoring of third-party cyber risks; experience with Axur and SecurityScorecard; advanced knowledge of OWASP, Application Security Architecture, and Vulnerability Management. • Analytical ability for risk management. • Strong consultative approach when working with technical and business teams. • Effective communication and the ability to influence critical information security decisions. • Problem-solving skills. • Ability to work independently and manage your own time.

🏖️ Benefits

• Multi-benefit card – choose how and where to use it. • Tuition assistance for undergraduate, graduate, MBA, and language courses. • Certification incentive programs. • Flexible working hours. • Competitive salaries. • Annual performance review with a structured career development plan. • International career opportunities. • Wellhub and TotalPass. • Private pension plan. • Childcare assistance. • Medical insurance. • Dental insurance. • Life insurance.