---
title: 'Information Security Manager at BVNK'
canonical: 'https://feeny.ai/job/information-security-manager-bvnk-sao-paulo-md4w8g0c1e66'
type: 'job'
last_seen: '2026-10-20'
---

# Information Security Manager at BVNK

- **Company:** BVNK
- **Location:** São Paulo, Brazil
- **Work type:** remote
- **Posted:** 2026-10-16
- **Last confirmed live:** 2026-10-20
- **Apply:** https://job-boards.eu.greenhouse.io/bvnk/jobs/5008751101

## Job description

About us:

BVNK is the stablecoin-powered financial stack for enterprises. We're now part of Mastercard, and together we're building a network for every form of money – one that delivers more reach, more capability and more choice.

We enable businesses to build financial products, unlock new markets, and move money in seconds across 130+ countries, with 40+ licenses for fiat and digital assets globally. Processing billions annually, we empower enterprises worldwide to send, receive, convert, and settle stablecoins and fiat seamlessly through a single integration.

Our mission is to accelerate global money movement, and we're assembling a world-class team to make it happen.

Trusted by industry leaders like Corpay, Worldpay, Deel, and Flywire, we deliver the infrastructure that makes new forms of money usable within the financial systems customers already rely on today.

By combining Mastercard's global payment reach and trusted networks with BVNK's stablecoin infrastructure, we're building the trusted operating layer for the evolution of money movement, helping customers participate in emerging digital networks without having to rebuild their businesses around every new innovation.

We're a diverse team spread across EMEA, North America, and APAC, with a shared belief that stablecoins are the new infrastructure layer for financial services, and that BVNK is at the forefront of this shift.

We're incredibly honored to have been recognized by:

- CNBC World's Top Fintech Companies (2026)
- FXC Intelligence Top 100 Cross-border Payment Companies (2026)
- Newsweek's The Top 100 Global Most Loved Workplaces (three years running, most recently 2025)
- LinkedIn as one of the Top 20 Startups in the UK (2025)

Location: We offer a Hybrid/Remote working policy.

FUNCTION: Engineering

We are seeking an experienced Information Security Manager to join our Security team.

The Information Security Manager at BVNK is instrumental in establishing and maintaining a robust framework for managing operational risks related to information security with a strong emphasis on compliance with Brazilian financial regulations. The primary focus will be the establishment and implementation of the necessary changes to the global frameworks, documentation and workflows to ensure compliance with local regulations. This involves identifying, assessing, and mitigating risks across business processes, technology platforms, third-party engagements, and regulatory compliance requirements. The Manager will collaborate across the organization, ensuring operational resilience and alignment with the overall risk appetite and security strategy.

Key Areas of Responsibilities:

Brazil License & Regulatory Compliance

- Oversee the modification and implementation of changes to the global information security operational risk and ICT control framework required to support the application for and maintenance of the Brazilian VASP financial license under BCB Resolution 520/25.
- Coordinate with local legal representatives, external counsel, and regulatory authorities (including the Central Bank of Brazil) to ensure information security policies and operational resilience mechanisms remain fully compliant with Brazilian regulatory standards.
- Oversee the creation of the necessary technical controls, their implementation and continuous operation, including reporting and monitoring.

Risk Identification and Assessment

- Update and manage the information security operational risk register, ensuring accurate classification, measurement, and reporting of identified risks.
- Conduct regular operational ICT risk assessments across critical business processes, IT systems, and applications to identify control weaknesses and potential impact scenarios.
- Collaborate with business process owners to integrate ICT risk controls and ensure adherence to the 'three lines of defense' model.
- Integrate and monitor internal fraud controls specifically related to IT systems, processes, and privileged access, establishing necessary detection and prevention mechanisms.

Audits and Compliance Management

- Support internal and external audit processes, including collecting evidence, managing audit requests, and ensuring continuous compliance with regulatory standards.

Risk Mitigation and Control Management

- Design, implement, and monitor key risk indicators (KRIs) and key performance indicators (KPIs) for IT security controls and processes.
- Facilitate the control self-assessment process, verifying the existence and effectiveness of security controls across the organization.

Investigations, Policies, and Training

- Investigate and create comprehensive reports regarding fraud cases, security incidents, and privacy violations, ensuring timely follow-up on remediation measures.
- Conduct operational risk reviews of client processes and tools, presenting recommendations on identified security gaps and creating initiatives for fraud prevention.
- Develop new documents for Security Related Policies and update current policies.
- Create new documents for other departments related to Security or information security topics.

What we need from you:

- Bachelor’s degree in Business, Information Technology, Information Security, or a related field, or equivalent experience.
- Demonstrated experience in operational risk management, IT risk, IT audit, or information security governance roles.
- Professional certifications such as CRISC, CISSP, CISM, or similar are highly desirable.
- Experience with SOC 1 and Vanta will be considered a strong plus.
- Experience and deep knowledge of the Brazilian regulatory standards related to information security in the financial sector.
- Demonstrated ability to develop, implement, and maintain an operational risk framework, ideally within an information security context.
- Strong understanding of security controls, governance, risk, and compliance (GRC) principles.
- Exceptional analytical and problem-solving skills, with a focus on translating technical risks into business context.
- Excellent collaboration and communication skills, capable of influencing stakeholders across technical and non-technical teams.
- Proficiency in utilising GRC tools and platforms for risk and control management.

What you can expect from us:

- Fair and competitive salary at every stage of your growth
- Flexible working hours, with hybrid working at its heart
- A culture built on passionate, growth-minded people
- A flexible approach to holiday
- Opportunities to travel to our offices around the world
- An open and creative environment where you can help us define the future of BVNK, its culture, and its opportunity sets

At BVNK, we are focused on building a diverse and inclusive team. While you may not meet all of our requirements, we’d encourage you to apply if you meet the majority of our expectations. You may be a great fit for this role or another role in our team.

## About BVNK

## Company Overview
- **One-liner**: BVNK delivers enterprise-grade stablecoin payments infrastructure, unifying banks and blockchains in a single platform to accelerate global money movement.
- **Entity Type**: Private (Series B, $50M round led by Haun Ventures, Coinbase Ventures, Scribble, and Tiger Global)
- **Headquarters**: London, United Kingdom (with offices in the US, Europe, and Africa)
- **Founded**: 2021
- **Founders**: Jesse Hemson-Struthers (CEO) and an unnamed co-founder/CTO

## Core Business
- **Primary industry**: Fintech / Payments Infrastructure (stablecoin and fiat payments)
- **Target customers**: B2B – fintechs, enterprise platforms, PSPs, and global businesses needing multi-rail payment solutions (e.g., Worldpay, Deel, LianLian Global, Rapyd)
- **Mission or purpose statement**: "Accelerate global money movement" by enabling seamless operation across fiat and blockchain payments.

## Products & Services
- **Layer1 Infrastructure**: Core API and custody layer for managing stablecoin payments, wallets, and liquidity in-house. Includes fiat-to-crypto conversion, on/off-ramp, and multi-rail orchestration (ACH, SEPA, Fedwire, SWIFT).
- **Managed Payments (Turnkey)**: A fully managed solution that leverages BVNK’s licensing, custody, and compliance framework to launch stablecoin payments quickly without building in-house.
- **Virtual Accounts**: Automated account management for sending, receiving, and converting stablecoins and fiat across 25+ currencies.
- **Payment Orchestration**: Single platform to route payments across multiple rails (fiat, stablecoin) and automate reconciliation, reporting, and compliance.

## Market Standing
- **Valuation/Market Cap**: Not disclosed (private company)
- **Key Metric**: **$25+ billion** annualised payment volume; **$90 million** in total funding (including a $50M Series B led by Haun Ventures, Coinbase Ventures, Scribble, and Tiger Global in 2024/2025)
- **Notable Investors/Partners**: Haun Ventures, Coinbase Ventures, Tiger Global, Scribble, Mastercard, Corpay, Meow, Worldpay, Deel, LianLian Global, Rapyd
- **Growth Signals**: 300+ employees (up from 130+ in earlier reports); 25+ licenses and regulatory approvals worldwide (including MiCA licence in Europe, MSB/MTL in US, EMI licences); SOC 2 Type II and ISO 27001 certified; Newsweek Top 100 Global Most Loved Workplaces (2025, 2024, 2023); LinkedIn Top 20 Startups UK 2025; partnership with Mastercard (March 2026); secured MiCA licence (Feb 2026).

## Competitive Advantages
- **Regulatory moat**: 25+ licenses (EMI, VASP, MSB, MTL) across multiple jurisdictions, including MiCA in Europe – a major barrier to entry.
- **Compliance-first architecture**: Safeguarded customer funds, multi-layered AML systems, SOC 2 Type II, ISO 27001, and independent audits.
- **Multi-rail platform**: Unifies fiat and stablecoin payments in one API, allowing instant transfers 24/7 within the BVNK ecosystem.
- **Proven scale**: $25B+ annual volume and tier-1 enterprise customers (Worldpay, Deel, etc.) demonstrate reliability and trust.

## Strategic Focus
- **Geographic expansion**: Full US coverage, MiCA licence in Europe, and continued licensing in APAC and other regions.
- **Product depth**: Building out card issuing (VP Cards role), fraud detection, and AI-native QA automation to enhance the platform.
- **Partnerships**: Deepening relationships with Mastercard, Corpay, and other payment networks to expand stablecoin use cases.
- **Talent growth**: Scaling the engineering, compliance, and commercial teams across EMEA, North America, and APAC.

## Why Work Here
- **Culture & values**: "Move fast", "Relentlessly resourceful", "Over deliver" – a high-ownership, action-oriented environment.
- **Remote/hybrid policy**: Flexible – many roles are listed as remote (US, UK, Europe, South Africa, Bulgaria, Poland, Spain, Malta). Offices in London, New York, and Cape Town.
- **Diverse team**: Spread across UK, USA, Europe, and Africa; emphasis on inclusion and diverse backgrounds.
- **Recognition**: Newsweek Top 100 Global Most Loved Workplaces (3 years running), LinkedIn Top 20 Startups UK 2025.
- **Engineering culture**: Roles in backend, AI, QA, product design, and tech leads – strong focus on building next-gen payments infrastructure with modern tech stack.
- **Perks**: Not explicitly listed, but competitive compensation, equity, and the opportunity to shape the future of stablecoin payments at a market leader.

## Sources
1. [bvnk.com](https://bvnk.com/)
2. [bvnk.com/about-us](https://bvnk.com/about-us)
3. [bvnk.com/careers](https://bvnk.com/careers)
4. [job-boards.eu.greenhouse.io/bvnk](http://job-boards.eu.greenhouse.io/bvnk)
5. [linkedin.com/company/bvnk](https://www.linkedin.com/company/bvnk)

## Other roles at BVNK

- [Security Operations & Risk Automation Engineer](https://feeny.ai/job/security-operations-risk-automation-engineer-bvnk-south-africa-p1pm7vgpy8gg) — South Africa, Bulgaria
- [Solutions Engineer](https://feeny.ai/job/solutions-engineer-bvnk-united-states-jb1tbxywb8h9) — United States
- [Senior DevOps Engineer](https://feeny.ai/job/senior-devops-engineer-bvnk-south-africa-bulgaria-poland-s5sx90hm4hxp) — South Africa Bulgaria Poland, Spain
- [BSA/AML Compliance Specialist](https://feeny.ai/job/bsa-aml-compliance-specialist-bvnk-united-states-b8shp8qjjxnt) — United States
- [Senior Legal Counsel - Product & Commercial](https://feeny.ai/job/senior-legal-counsel-product-commercial-bvnk-london-6cwded7fmrbe) — London, United Kingdom / Europe
- [Compliance Senior Manager - Malta](https://feeny.ai/job/compliance-senior-manager-malta-bvnk-malta-1nz3ctv350jy) — Malta
- [Deputy MLRO (Malta)](https://feeny.ai/job/deputy-mlro-malta-bvnk-malta-e6c2ekb018rx) — Malta
- [Deputy MLRO (UK)](https://feeny.ai/job/deputy-mlro-uk-bvnk-london-48t6ap589yzz) — London, United Kingdom
- [Product Marketing Manager](https://feeny.ai/job/product-marketing-manager-bvnk-london-ky0rg42n6bkv) — London, United Kingdom / New York, NY
- [Onboarding Analyst](https://feeny.ai/job/onboarding-analyst-bvnk-south-africa-dhvxh9h2bdjq) — South Africa/, Bulgaria