Head of IT Security and Grc

**WHO WE ARE**
- Founded in 2008, Trustly is the global leader in Open Banking Payments, and the U.S. is Trustly’s fastest-growing market. Today we serve 10,000 merchants, connecting them with over 650 million consumers and 7,600 banks in over 30 countries. In 2021, we processed over $20 billion in transaction volume in our global network.

Our digital account-to-account platform redefines the speed, simplicity, and security of payments. Consumers pay for purchases by simply signing into their bank accounts, bypassing the card networks, and never leaving a merchant’s site or app - no credit card numbers or separate account setup necessary. With offices in Vitoria, Brazil, Silicon Valley in the US, and global headquarters in Stockholm, Sweden, we are a culturally diverse team. Across Brazil, we have embraced remote work from home policy.

At Trustly, we believe that inclusion and diversity are essential foundations for building a fair and equitable society. We do not discriminate based on race, religion, ancestry, color, national origin, gender identity, sexual orientation, age, citizenship, marital status, or disability status. Our main goal is to provide a fair, welcoming, diverse environment with opportunities for all collaborators. The stages of our selection process take place online and without distinction of any kind.

It’s a great time to join Trustly as the Americas team is growing fast. If you thrive in an entrepreneurially-minded, fast-paced, casual, professional, positive, and rewarding work environment, check us out

**What you'll do**:

- Responsible for IT Security strategic planning and information security policies;
- Keep management on track of Information Security, Data Protection and GRC matters to management team through regular Information Security Committee meetings;
- Promote a culture of security and privacy within the company through the security awareness program;
- Identify, assess and manage IT Security and Compliance risks and enforce the implementation of key controls to mitigate significant risks;
- Ensure IT controls effectiveness through the Control Self Assessment and enforcing corrective actions when deemed necessary;
- Ensure that the organization complies with Data Privacy laws, such as the CCPA and GDPR;
- Ensure that the IT department maintains SSAE18 and SOC 2 compliance at all times as well as other compliance related processes required by merchants, vendors and other third parties;
- Conduct IT Security programs in order to obtain additional certifications (e.g. ISO 27001/27701);
- Perform vendor due diligence and security reviews;
- Support Legal and business teams on reviewing agreements (MSA’s, NDA’s, MNDA’s etc.) with vendors, partners and clients especially concerning data privacy and IT security matters;
- Main point of contact for attending external audits / due diligence comprising Data Protection, IT Security and GRC matters;
- Ensure appropriate Incident Response process is followed and investigation / post mortem activities take place promptly and completely;
- Ensure Business Continuity and Disaster Recovery processes are followed, tests are performed and corrective actions are implemented in a timely manner.

**Who you are**:

- Bachelor’s degree in Computer Sciences, Management, Engineering or related areas;
- Experience with Information technology;
- Experience in a management role;
- Advanced English;
- Advanced skills in information security, GRC, Data Protection, Privacy, Risk Management, Amazon AWS, Incident Management and Response.

**Our perks and benefits**:

- Bradesco health and dental plan, for you and your dependents, with no co-payment cos
- Sulamérica life insurance with differentiated coverage
- Meal voucher and supermarket voucher
- Home Office Allowance
- Gympass - Platform that gives access to spaces for physical activities and online classes
- Trustly Club - Discount at educational institutions and partner stores
- Monthly happy hours with iFood coupon
- English Program - Here you have space to develop your English, and you can choose an Online Platform or English Classes in company
- Extended maternity and paternity leave
- Birthday off
- Flexible hours/Home Office - our culture is remote-first You can work in every city in Brazil
- Welcome Kit - We work with Apple equipment (Macbook Pro, iPhone) and we send many more treats Spoiler alert: Equipment can be purchased by you according to internal criteria
- Annual premium - As a member of our team, you are eligible to receive an annual bonus, at the company's discretion, based on the achievement of our KPIs.

Check out our Brazil Life page on Linkedin for more details about Brazil, our culture and much more.

LI-Remote

LI-CAMILAW-TRUSTLY

At Trustly, we embrace and celebrate diversity of all forms and the value it brings to our employees and customers. We are proud and committed to being an Equal Opportunity Employer and believe an open and inclusive environment en