Security Engineer

• Lead the security strategy, governance, and operations for the CI&T Flow platform, ensuring compliance with international standards (ISO 27001, NIST, LGPD, SOX) and strengthening trust with CI&T’s enterprise customers.
• Act strategically with Product, Engineering and Business teams to make security a competitive differentiator and an enabler of innovation.
• Define and maintain the strategic security roadmap, prioritizing initiatives based on risk and business impact.
• Coordinate the implementation, maintenance, and audit processes for ISO 27001 certification and other regulatory compliances.
• Participate in architecture reviews with development and platform teams, analyze technical risks, propose mitigation measures, and assess impacts with leadership.
• Develop and oversee AI security governance, ensuring ethical use, traceability, and data protection in solutions based on LLMs.
• Manage security service contracts and partners, such as penetration testing (Pentest), SOC, compliance, and technical audit providers.
• Implement security performance and maturity indicators (KPIs/KRIs), reporting progress and results to executive leadership.
• Lead incident response plans, vulnerability assessments, and continuous threat monitoring.
• Promote secure innovation by integrating DevSecOps practices, control automation, and AI governance.
• Plan and manage the security budget, balancing risks, priorities, and sustainable growth.
• Support Sales, Legal, and Customer Success teams in risk analysis, contractual clauses, and security communications with customers.
• Represent the security area in executive committees and strategic forums, translating technical risks into business value.

Senior Security Officer

Senior Security Architect

Engenheiro de Segurança de Software

Analista de Segurança da Informação Sênior

Security Researcher

Senior Security Architect