Data Privacy Lead
QuintoAndar, Brazil
Job Description
Be safe from Coronavirus:
With the spread of the new Coronavirus (Covid-19) increasing fast, we prioritize the safety of employees, partners, customers and candidates. Therefore, all of our teams are working from home. In addition, we have also adapted the hiring process for all our opportunities, so you can complete the steps without leaving your home and staying safe.
For this role you'll have the option to work from home based in São Paulo or anywhere else in Brazil - with the possibility of choosing to use our office in São Paulo up to twice a week.
About QuintoAndar:
QuintoAndar is a Brazilian technology company that was created to simplify the lives of those looking for a new home. We are changing the real estate market with a pioneering business model in the world. We have a lot of talented people working to ensure that thousands of people around Brazil live better. Our team already has over a thousand people and we have offices in São Paulo and Campinas. Our product is now available in more than 20 Brazilian cities.
At QuintoAndar you will:
- Work with a top-notch team that uses the best practices and best tools.
- Learn a lot.
- Be part of a high-impact project that will affect many people's lives.
- Work in an informal environment and horizontal hierarchy.
Privacy Lead at QuintoAndar:
You will work directly with strategic customers which requires a dynamic, communicative and analytical posture. It will be necessary to provide consulting, program management, and technical expertise in order to implement policies and standards in order to help the data privacy team to implement viable solutions.
Responsibilities:
- Coordinate the data privacy team with the stakeholders (product, engineering, operations, people)
- Architect high impact projects and ensure its results
- Engage different stakeholders in multidisciplinary problems
- Support product teams in order to create compliant solutions
- Drive adoption of information security policies and compliance with relevant regulation such as GDPR and LGPD
- Train and engage the company in privacy matters
- Elaborate privacy and security risk strategy management (assessment, analysis, risk measures and remediation roadmap)
- Tailor executive infosec reports to the stakeholders and senior management
- Adapt market frameworks as NIST, ISO, CIS Control to 5A reality
- Rise the security information technical knowledge of the data privacy team
Language and location
This job description is written in English because for that position you will need it for communications with coworkers and suppliers who are from worldwide, for tools and internal materials as well. // A descrição desta vaga está escrita em Inglês porque para esta posição é necessário para a comunicação com colegas e fornecedores, que são de diferentes países, além do uso de ferramentas e materiais internos.
Our office is in Sao Paulo, at Vila Madalena, near metro station 'Vila Madalena' and 'Fradique Coutinho'.
About our selection process:
It usually takes around 20 days (from your applying to the end) and follows this steps:
1. Application Screening
2. Phone interview with Recruiters
3. Interview with Infrastructure and Privacy Team + Reference Check
4. Offer
Important: Our recruitment process starts at the application form! If you really wish be a part of our team, endeavor to do well at this stage of the process. We analyze all the candidates individually. Yes, we do read all applications and we’ll reply even to those who won't follow the process.
Requirements
- Work with data privacy and protection governance before
- Knowledge of security information architecture, process and solution
- Experience with team management
- Experience with KPI’s management and project management
- You're a problem solver. You're a handyman. You fix hardware problems, software problems, leaky faucets, stained clothes.
- Be an analytical and communicative person in order to be able to formalize the risk and impact based in processes, data, technology and people
- Be self motivated to be aware of new trends in data privacy, security information, threats and risks
We might like you even better if you:
- Have certifications as DPO, ITIL, COBIT or have worked in ISO 27000 and ISO 27701 projects
- Have experience leading data privacy and security projects
- Have knowledge in SDLC
- Authentication and Authorization. Appsec and cryptography technologies (Ex.: WAF, API Management, Vault, etc)