Director of Cybersecurity – Incident Response

Responsibilities

• Design, implement and maintain the Cybersecurity Policy, the Incident Response Plan, and the Cloud Services Contracting Policy, in line with BCB Resolution 85/2021 and BCB Resolution 520/2025.
• Oversee the protection of private keys and the custody architecture (cold/hot/warm wallets, MPC, multisig, HSM).
• Lead the security operations function (SOC/SIEM, threat intelligence, vulnerability management, pentests, red‑team).
• Ensure timely reporting of relevant incidents to the BCB, ANPD (LGPD) and other authorities, and coordinate post‑incident remediation.
• Manage third‑party and cloud risk (vendor due diligence, contractual safeguards, BCB notification regime for relevant IT contracts).
• Integrate cybersecurity into the broader risk framework alongside the Risk, Compliance, AML and IT functions.
• Build and lead the cybersecurity team; embed a security‑by‑design culture.
• Represent the company be...