Cyber Security Coordinator - RecargaPay

RecargaPay is seeking a technical leader to drive the company's information security governance, policy framework, risk management, business continuity, regulatory compliance, and identity and access governance (SailPoint, Google Workspace, AWS IAM).

In a regulated fintech, every control must be defined, executed, measured, and proven. This role will guide the team of analysts making it happen.

Why This Role Matters

Weak governance, untested continuity plans, and poorly controlled access—especially service and privileged accounts—are direct sources of risk and audit findings. RecargaPay is looking for someone to provide technical direction to a team that transforms policies and controls into verifiable, automated, and audit-ready practices.

Responsibilities

• Identity & Access Governance: Own the identity lifecycle (joiner/mover/leaver) and certifications in SailPoint, RBAC, segregation of duties (SoD), least privilege, and access management in Google Workspace and AWS IAM.
• Non-Human & Privileged Identities: Govern non-human identities (service accounts, API keys, tokens, and app credentials) and privileged access (admin accounts, just-in-time access, break-glass) with defined ownership, lifecycles, credential rotation, and recurring reviews.
• Automation via N8N: Direct automations in N8N (provisioning, approvals, notifications, and integrations across SailPoint, Google Workspace, AWS, and HR/ITSM systems) to eliminate manual work and generate evidence.
• Governance Metrics: Produce governance indicators and reports (access SLAs, orphan accounts, privileged access, risk status, continuity tests, and audit findings) for the CISO and leadership.
• Technical Leadership: Lead the team of analysts, direct priorities, define technical standards, review deliverables, provide feedback, and develop team members.
• Security Governance Framework: Maintain the IS governance framework (policies, standards, procedures) and drive IS and third-party risk management (assessments, action plans, remediation tracking, reporting to CISO and committees).
• Business Continuity Management: Manage business continuity (BIA, continuity and recovery plans, periodic testing, and lessons learned aligned with ISO 22301).
• Compliance & Audits: Lead compliance and audit readiness for ISO 27001, ISO 22301, and Central Bank regulations (controls, evidence, responses, and finding remediation).

Requirements

• Practical experience in identity and access management using SailPoint (IdentityIQ or Identity Security Cloud), advanced Google Workspace administration, and AWS IAM (policies, roles, federation/SSO).
• Deep knowledge of non-human identities (service accounts, API keys, tokens, secrets, workload identities) and lifecycle management.
• Experience with privileged access and administrative accounts, least privilege, just-in-time access, break-glass, and periodic access reviews.
• Mastery of access concepts (RBAC/ABAC, SoD, SSO, SAML/OIDC, SCIM, MFA) and familiarity with N8N (or equivalent) automation, REST APIs, webhooks, and JSON.
• Ability to communicate risks and results effectively to executives, committees, and business units.
• Proven experience in GRC (Governance, Risk, and Compliance) for information security.
• Experience in business continuity management (BIA, BCP/DR) and familiarity with ISO 27001, ISO 22301, and Central Bank regulations.
• Technical team leadership experience (prioritizing, reviewing work, mentoring).

Nice to Have

• Access control experience for internal AI systems (agent identities, permissions, tool access scopes, audit trails).
• Relevant certifications (CISSP, CISM, CRISC, ISO 27001 Lead Auditor, ISO 22301, SailPoint, AWS Security Specialty).
• Technical reading proficiency in English.

Benefits

• Competitive salary aligned with the market.
• Remote work setup.
• Home office monthly allowance.
• Health and dental insurance with zero copay.
• Life insurance.
• Flexible meal voucher (Flash).
• TotalPass subscription.