Business Information Security Officer

Role Overview

• Be the link between Information Security (IS) and the business.
• Serve as the dedicated and ongoing Information Security point of contact for Product and Engineering squads.
• Actively participate in team ceremonies, planning sessions and product reviews — not as an occasional guest, but as a relevant member of the conversation.
• Translate security requirements into language and context that make sense for development teams, product managers (PMs) and product leaders.
• Identify, assess, and communicate security risks clearly to non-technical stakeholders.
• Build and track risk treatment plans with the areas, prioritizing based on real business impact.
• Ensure Product and Engineering teams understand the risks they are assuming with each decision — and that those choices are made consciously.
• Act as a facilitator between squads and the IAM team for access provisioning and reviews — removing friction while maintaining necessary controls.
• Support teams in incorporating security practices throughout the development lifecycle (security by design, threat modeling, architecture reviews).
• Act as a guide on compliance and Information Security policies, with a pragmatic view of the real needs of those building the products.
• Foster a security culture that is perceived as an enabler, not an obstacle.
• Promote continuous, contextualized security awareness for Product and Engineering teams.
• Identify recurring risk patterns and propose systemic improvements, not just ad-hoc fixes.

Requirements

• Strong experience in Information Security, including roles that involved direct interaction with business, product or software engineering teams.
• Practical knowledge of risk management, Information Security policies and security frameworks (ISO 27001, NIST, etc.).
• Familiarity with software development lifecycles and agile methodologies — you need to speak the language of the teams you will support.
• Preferred: experience at technology companies or fintechs.

Benefits

• Flexible Hours: More autonomy to organize your schedule with balance and responsibility.
• Flexible Work Models: Remote, hybrid or on-site, depending on the role's needs.
• No Dress Code: Freedom to be yourself, without formality.
• Birthday Day Off: One day off during your birthday month to celebrate as you wish.
• Blip Recharge: 5 paid days off per year for roles without time tracking, designed to help balance workload.
• Meal or Food Allowance: BRL 1,144.00 per month, paid with no deductions and credited during vacation and leave.
• Transportation Allowance: Available according to commuting needs.
• Wellhub (Gympass): Access to gyms, wellness apps and fitness activities, also available for dependents.
• SESC Partnership: Access to cultural activities, leisure, sports, hotels, holiday resorts and more.
• Health Insurance (SulAmérica): National coverage, private room for you and your dependents, with only copayment contributions.
• Dental Plan: National coverage for you and your dependents, three plan options, with the full cost of the chosen plan covered.
• Conexa Saúde: Online psychological care platform.
• Life Insurance: Coverage equivalent to 24 times your monthly salary.
• Extended Maternity Leave: 180 days to comfortably experience the start of this new phase.
• Extended Paternity Leave: 30 days to be present and strengthen bonds.
• Childcare Allowance: Reimbursement of BRL 676.81 for children up to 2 years old and BRL 592.21 for children up to 5 years old.
• Allowance for Dependents with Disabilities: Support of BRL 846.02 for children with disabilities or neurodiversity.
• Educational Support: Partnerships with higher education institutions and language schools.
• ICP – Short-Term Incentive: Financial recognition linked to Blip's goals.
• Your Name Matters: Reimbursement of up to BRL 250.00 for expenses related to legal first-name and/or gender marker changes, supporting inclusion and respect for identity.