Santander

Cyber Security Spec II (BISO)

In short

This role acts as a Business Information Security Officer (BISO) bridging Information Security and business areas within Santander's Cyber Security & Anti-Fraud team in Brazil. It involves conducting risk assessments, following up on security action plans and vulnerabilities, supporting Security by Design adoption, and participating in governance and compliance activities. It requires knowledge of frameworks like NIST CSF, CIS Controls, ISO 27001/27002, risk management, LGPD/PCI DSS compliance, and application/cloud security concepts, along with strong communication and consultative skills.

Cyber Security Spec II (BISO)
Country: Brazil
If you have a desire to grow and keep learning, and a passion for impacting people through your analyses, this could be your place.
By joining Santander's Cyber Security & Anti-Fraud team, you will work on the team responsible for preventing internal and external fraud and mitigating cyber security and information security risks, in a defense-center model aligned with the bank's digitalization model.
We have an opening for you to become a Cyber Security Spec II. Here in the Cyber Security Architecture area, you will be part of the team responsible for delivering services and products with an end-to-end view of the customer journey and experience. This can be the next step to grow and develop your career.
You will identify with us if you have:
•Think Customer – I think about the customer
•Embrace Change – I drive change
•Act Now – I act with speed
•Move Together – I work as a team
•Speak Up – I speak openly
Your role will be to:
•Act as a point of contact between Information Security and business areas.
•Support areas in adopting security practices and requirements.
•Conduct and monitor business and technological risk assessments (Risk Assessment).
•Support the identification and communication of security risk impacts.
•Follow up on action plans, vulnerabilities, risks and security deviations.
•Support the adoption of Security by Design principles in projects and initiatives.
•Participate in governance forums and follow-up meetings.
•Support audits, compliance demands and the treatment of deviations.
•Contribute to awareness actions and the strengthening of the security culture.
Essential Requirements:
•Knowledge of Cyber Security frameworks, such as NIST CSF, CIS Controls and ISO 27001/27002.
•Knowledge of Risk Management and Information Security.
•Knowledge of Governance, Compliance and regulatory requirements, such as LGPD and PCI DSS.
•Knowledge of Security by Design and secure development concepts (SSDLC).
•Notions of Application Security, Cloud Security and Security Architecture.
•Knowledge of IAM, Vulnerability Management and Incident Response.
•Ability to monitor and analyze security indicators, risks and action plans.
•Good communication and interpersonal skills.
•Analytical, consultative and collaborative profile.
•Organizational capacity and ability to follow up on demands.
•Proactivity and interest in developing cyber security knowledge.
•Ability to work with different areas and multidisciplinary teams.
•Risk and business needs orientation.
Desirable Requirements:
•Experience in agile environments and digital transformation.
•Experience in regulated sectors, especially the financial sector.
•Knowledge of Cloud Security, Data Security or GenAI Security.
•Experience in activities related to Cyber Security, Risk, Compliance or Security Business Partner.
•Certifications or courses related to Information Security.
Benefits
•Variable Compensation (PLR + Bonus)
•Medical and Dental Assistance
•Food and Meal Allowance
•Supplementary Pension Plan
•Life Insurance
•Daycare/Babysitter Allowance
•Gympass or Totalpass
•Transportation Voucher
•Nascer Program
•Be Healthy - program that encourages healthier habits
•PAPE - specialized personal support program

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot