Security Engineer

• Design, execute, and continuously improve EdgeUno’s global Information Security Program aligned with ISO 27001:2022 and industry best practices.
• Serve as the Information Security Officer (ISO) responsible for maintaining our ISO 27001:2022 certification, leading audits, gap analyses, and surveillance processes.
• Define security policies, controls, and guidelines to mitigate risk and ensure corporate policies and regulatory compliance across geographies.
• Lead and mentor the Information Security Team providing support for internal users across all departments and locations.
• Own and operate the Information Security Risk Management Framework including regular risk assessments, control validation, vendor security reviews, and mitigation planning.
• Lead and maintain Business Continuity Plans (BCP), Disaster Recovery Plans (DRP), and Contingency Planning procedures.
• Collaborate with Legal, Operations, and external consultants to ensure alignment with data privacy laws (e.g., LGPD, GDPR, and LATAM regulations).
• Manage Security Operations Center (SOC) functions either in-house or with third-party providers, ensuring effective threat detection and incident response.
• Oversee Threat Intelligence, vulnerability management, and offensive security practices including regular penetration testing and red/blue team exercises.
• Define and enforce Data Loss Prevention (DLP) strategies to monitor and protect sensitive data across databases, endpoints, cloud, and SaaS platforms.
• Drive data classification and privacy-by-design principles across systems and development workflows.
• Develop and run a company-wide Security Awareness Program, ensuring employees understand their roles in cybersecurity and compliance.
• Conduct phishing simulations, internal campaigns, and role-based training to drive security culture across the organization.
• Partner with stakeholders to ensure alignment between support, device, and security policies.
• Serve as the primary point of contact for all security incidents, regulatory inquiries, and audit responses.
• Regularly report program status, information security risks, and KPIs to executive leadership.

Information Security Manager

Information Security Engineer

Mid-Level Customer Success Manager, Cybersecurity