Cardway

Compliance

• Sustain and evolve the company's ISMS (Information Security Management System).
• Maintain information security policies, standards and procedures.
• Ensure adherence to frameworks such as ISO 27001, NIST and CIS Controls.
• Support cyber risk management and corporate controls.
• Support maintenance of PCI DSS certification.
• Organize evidence, controls and regulatory action plans.
• Support compliance measures related to BACEN (Central Bank of Brazil) and other financial regulations.
• Work closely with Compliance, Legal and Audit teams.
• Support internal and external audits.
• Support due diligence processes for clients and partners.
• Organize compliance documentation, evidence and controls.
• Track non-conformities and remediation actions.
• Support initiatives related to LGPD (Brazilian Data Protection Law).
• Support information classification and data retention.
• Participate in DLP initiatives and information leakage prevention.
• Support data governance and compliance.
• Collaborate with Infrastructure, Development, Legal and Compliance teams.
• Translate regulatory requirements into practical, sustainable actions.
• Support KPIs and executive reporting for the area.

Governance, Risk and Compliance Specialist