Pismo

We've been building since day one a diverse and ready to cross the oceans team and mindset with the most innovative professionals in their field. We are not only committed to delivering cutting-edge solutions to help our clients build their products. We want to promote change in how the world deals with financial services and impact millions of lives.

We are a Remote-first company, so yes, you can work pretty much from anywhere. But if you still need to go to the office every now and then, we currently have four offices located in Brazil (São Paulo), The USA (Austin), The UK (Bristol) and Singapore.

Investors

We are backed by some of the most prominent investment companies in the market, such as SoftBank, Amazon, Accel, B3, Falabella Ventures, Headline, PruVen and Redpoint eventures.

Read our Series B announcement here.

Summary

The Information Security Analyst - GRC involves performing comprehensive scoping, control assessments, and audit facilitation as part of the certification team. This person will work closely with cross-functional teams to assess risks and controls, work directly with Business Continuity, Disaster Recovery and Crisis Management, and assist with IT audit projects.

What you'll do

Ensure the security process is governed by organizational policies and practices that are consistently applied;
Require that data with similar criticality and sensitivity characteristics be protected consistently regardless of where in the organization it resides;
Enforce compliance with the security program in a balanced and consistent manner across the organization and ensure adherence to applicable regulations;
Routinely inform the Operations & Technology Committee & Management Risk Committee (MRC) of the overall status of the Institution’s Information Security Program to prevent cyber-attacks;
Coordinate Risk Assessment audits, PCI DSS, PCI PIN Security, ISO 27001, ISO 22301, penetration/vulnerability tests, and other related assessments;
Contribute to the definition of BC & DR strategy, policy, standards, plans, and direction;
Be the subject matter expert on business continuity, disaster recovery, and crisis management, supporting business stakeholders;
Structure, support, and coordinate regular business continuity and disaster recovery testing to assess the effectiveness of established plans and procedures;
Structure, support, and coordinate all aspects of design, implementation, planning, testing, and governance of Business Continuity, Disaster Recovery, Emergency, and Crisis Management Plans within the company's Business Continuity scope;
Ensure that the business, IT, and third-party teams involved are adequately trained in BC, DR, and Crisis requirements, policies, and standards and that the Business Continuity theme is disseminated throughout the company;
Structure and conduct Business Impact Analysis (BIA);
Create executive reports regarding strategies, test results, risks, and crises;
Build and update business continuity KPIs;

Minimum Qualifications

Experience of cybersecurity frameworks and audits such as ISO 27001, ISO 22301, PCI DSS, SOC 1 and SOC 2 and other regulatory requirements;
Experience with Business Continuity, Disaster Recovery and Crisis Management;
Desirable experience with Disaster Recovery with AWS;
Advanced english (C1);

Core Benefits

Remote work
Flexible hours
Gympass
Meal & Food vouchers
Remote work financial support
Life Insurance
Medical and Dental Assistance
Employee child care benefit: daycare
Vidalink partnership
Day off (Birthday)
Support for studying languages
50% off AWS and GCP certifications

Technologies that we apply in our day

SAST
SCA
IaC Scans

Our core values

Responsibility & Commitment

Responsibility and Commitment are key tenets of Pismo's business. In all of our interactions, ethics and honesty serve as guiding principles. Transparency and alignment are essential at Pismo to foster a culture of accountability where people do not take shortcuts and dare to be vulnerable. We encourage ownership and enable our employees to be a part of the solution to our challenges.

Challenging the Status Quo to Drive Change

Pismo is a disruptive company that knows we can’t count on what got us here to get us where we want to go. Instead of following trends, our team members create them. We strive for the best solution for every situation, not the easiest. Taking the ordinary or common sense route is insufficient. This is how we affect real change.

Minimum Friction Experience

Pismo's success depends on fluid, clear, and careful internal and external communication. Our solutions should address issues directly rather than causing new ones. We understand that learning and development is a positive outcome of necessary friction. We want our customers and employees to have a pleasant experience free of bureaucracy.

Collective Power

Pismo isn't simply mine, yours, or some other team's. All of our people have a good purpose for being here. Each of us, in our way, has the freedom to be ourselves and know we are accepted. Pismo values being a multicultural organisation. We are stronger, more efficient, and happier when we operate as a team.

Delivering Value and Excellence

Constant development is essential as it allows us to supply high-quality products and services while ensuring that we always bring value to our clients. Pismo recognises the importance of new information in breaking down boundaries and forging new possibilities. We pave the way and set trends by developing market-leading solutions.

Focus on People

People are a company's most valuable asset. That is why we prioritise attracting and hiring the best people, followed by personal and professional development. We invest in people's growth and empower them to take charge of their careers. We value work-life balance because we understand how difficult it can be to distinguish between work and life.

Pismo is an Equal Employment Opportunity employer that proudly pursues and hires a diverse workforce. Pismo does not make hiring or employment decisions on the basis of race, color, religion or religious belief, ethnic or national origin, nationality, sex, gender, gender identity, sexual orientation, disability, age or any other basis protected by applicable laws or prohibited by company policy. Pismo also strives for a healthy and safe workplace and strictly prohibits harassment of any kind.

Apply for this Job

* Required

First Name *

Last Name *

Email *

Phone

Resume/CV *

Dropbox Google Drive

(File types: pdf, doc, docx, txt, rtf)

When autocomplete results are available use up and down arrows to review

+ Add another education

Have you ever worked for Visa Inc. or any wholly-owned subsidiaries of Visa Inc. (e.g., CyberSource, Fundamo, etc.) in any capacity (e.g., Contractor, Full-time Employee, Consultant, Intern, etc.)? *

To your knowledge, do you have any relatives working or who have worked for Visa? *

If yes, please list your relatives name and your relationship to them.

Do you have any contractual restrictions or restrictive covenants that could impact your ability to fully meet the needs of this position at Visa (e.g., a non-compete agreement)? *

In the past 6 months have you been a decision maker on a Visa contract, license or permit while employed by a government or state owned entity (e.g., bank, airline, telecommunications company)? Note: A state-owned entity is a legal entity that is commercial enterprise owned or controlled by government. *

Based on your current or previous employment (in the last 24 months), are you subject to any restrictions on lobbying or appearing before the government? *

Are you a close relative (e.g., parent, child, spouse, sibling, or nephew/niece) of an employee of a non-U.S. government or agency? *

Are you a close relative (e.g., parent, child, spouse, sibling, or nephew/niece) of an employee of a company controlled or owned wholly or in part by a non-US government? *

Have you been employed by KPMG, Moss Adams or BDO USA during the last two (2) years or otherwise maintain a present relationship with KPMG, Moss Adams or BDO USA (i.e., have any financial arrangements)? *

Do you have an active relationship with KPMG, Moss Adams or BDO USA? If so, please indicate the nature of this relationship. *

On behalf of or through other arrangements with KPMG, Moss Adams or BDO USA, do you or a close family member of yours expect to provide ten (10) or more hours of non-audit services to Visa on a recurring basis going forward? *

Do you have a close family member who works for KPMG, Moss Adams or BDO USA? (e.g., spouse, spousal equivalent, parent, dependent, non-dependent child or sibling) *

By applying, I acknowledge that I have read and understand the Pismo Candidate Privacy Notice. *

Candidate Privacy Notice

Our system has flagged this application as potentially being associated with bot traffic. Please turn off any VPNs, clear your browser cache and cookies, or try submitting your application in a different browser. If this issue persists, please reach out to our support team via our help center.

Please complete the reCAPTCHA above.

Information Security Analyst III