Head Of Cyber Security

About OSL

OSL is a leading digital asset platform. We are expanding our footprint in Latin America and seeking a talented Cybersecurity Specialist based in Brazil to champion security operations, threat defense, and compliance across the region.

Key Responsibilities

Security Infrastructure & Threat Defense

• Design, implement, and maintain security controls across local operations, covering network security, cloud security (AWS/GCP), IAM, and endpoint defense.
• Conduct continuous vulnerability assessments, penetration testing, and system security hardening.

Compliance & Data Privacy (LGPD)

• Collaborate with global compliance teams to ensure technical adherence to Brazil's LGPD (Lei Geral de Proteção de Dados) and local financial regulations (BACEN guidelines).

Incident Response & Threat Intelligence

• Act as the primary responder for security incidents in the region;
  lead threat hunting, triage, root-cause analysis, and post-incident remediation.
• Monitor regional and global digital asset threat landscapes (phishing, credential stuffing, API exploits, etc.).

Security Automation & Operations

• Manage and optimize security tools, including SIEM, EDR, SOAR, and WAF, driving automation in monitoring and alerting workflows.

Cross-Functional Collaboration

• Serve as the security liaison between the Brazil/LATAM team and HQ Global Security leadership, ensuring seamless alignment on security policies.

Requirements

Experience:

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• 3+ years of experience in cybersecurity, enterprise security, or cloud security, preferably within FinTech, Blockchain, Exchanges, or Digital Asset Custody.

Language Proficiency (Must-Have):

• Fluency in English (Working proficiency — required for global team collaboration).

Technical Expertise:

• Hands-on experience with Cloud Security (AWS/GCP), network security, zero-trust framework, and IAM architecture.
• Solid understanding of enterprise security controls, API security, and vulnerability management.

Regulatory Knowledge:

• Familiarity with LGPD compliance requirements and global security frameworks (ISO 27001, SOC 2, NIST).

PLUS

• Fluency in Portuguese (Native/Professional — required for local operations and vendor communications).