Brazil Cyber Assurance Partner – Regulatory & GRC at dLocal
dLocal is Hiring
Job Info:
- Company dLocal
- Position Brazil Cyber Assurance Partner – Regulatory & GRC
- Location Sao Paulo (Hybrid)
- Source Lever
- Published May 01, 2026
- Type Full-Time
Job Description
About Us & The Role
We do not do "check-box" compliance, and we don't do corporate fluff. Within the Security Department, under the guidance of the CISO and security leadership, our Cyber Assurance team operates with a street-smart, pragmatic approach. We are looking for a versatile, self-driven Brazil Cyber Assurance Partner based in Brazil to lead our governance, risk, and compliance efforts in one of our most strategic markets.
This role is a tactical bridge between complex regulatory mandates and actual operational security. You will navigate the intricate landscape of the Central Bank of Brazil (BACEN) and other financial authorities, translating their dense requirements into simple, actionable technical and business processes for our internal teams and merchants.
What You'll Do
Regulatory Diplomacy & BACEN Liaison: Act as the strategic lead for the Central Bank of Brazil (BACEN). You will be the primary point of contact and respondent for the regulator, ensuring dLocal remains the gold standard for regulated fintechs in the region.
Audit & Review Leadership: Lead annual audits and ad-hoc reviews conducted by BACEN. You will coordinate efforts across cybersecurity and IT to ensure all regulatory requirements are met with precision.
SOC 2 Mastery: Take ownership of the implementation and maintenance of the SOC 2 standard. You will ensure our controls are not just compliant on paper, but effectively protecting our environment.
Pragmatic GRC (Real Security, Not Paper): Move beyond "just for compliance" to add genuine security value. You will audit and adjust our technology and processes to fit the Brazilian market, training local teams when necessary to ensure operational resilience.
Technical Translation & Execution: Interpret dense requirements from regulators, financial authorities, and third parties, translating them into plain English and actionable tasks. You will bridge the gap between technical security and business owners.
Hands-on Regional & Global Compliance Support: Provide versatile support for international regulations (e.g., SOX, DORA) and global standards (PCI DSS, ISO) alongside local Brazilian mandates.
Roll Up Your Sleeves: While exhaustive experience in every framework is not required, a "roll up your sleeves" attitude is necessary to assist the team in advancing these initiatives based on workload.
Anticipatory Market Intelligence: Stay ahead of the curve by regularly interacting with stakeholders to monitor new BACEN circulars and regulations, allowing the company to adapt before changes impact velocity.
What You Bring
Local Presence & Language: You must reside within Brazil to fulfill the requirement of responding locally to BACEN. Fluency in Portuguese and English (written and oral) is mandatory as English is the official language of the company.
Regulatory Foundations: Proven experience with SOC 2 implementation. Basic knowledge of international frameworks (SOX, DORA) and standards (PCI DSS, ISO) is essential.
High EQ, IQ, & Organizational Navigation: You can seamlessly navigate a complex corporate landscape and align technical, financial, and operational teams toward a common security goal.
Street-Smart Versatility: A fast learner who can navigate complex corporate landscapes and negotiate with both technical and commercial leads.
AI Fluency & Fast Execution: Comfortable using LLMs as your co-pilot to move at 10x speed, automating the administrative parts of governance.
Pragmatic & Impact-Driven Mindset: You dislike unnecessary bureaucracy and focus on what actually reduces risk and adds value while supporting business growth.
How You'll Work
You will operate with a high degree of autonomy, taking the CISO's vision and using your street smarts to figure out the "how" and execute. This is a senior role for someone who wants to make a visible impact, build relationships across the globe, and redefine what modern, pragmatic security governance looks like in Brazil.