Offer summary

Qualifications:

Strong communication skills in English and Portuguese; Spanish is a bonus., Familiarity with audit frameworks such as SOC 2, SOX, PCI-DSS, and ISO 27k., Ability to summarize and convey security and compliance topics to non-technical audiences., Experience in collaborating across multiple organizations like product, engineering, and sales..

Key responsibilities:

Partner with compliance, legal, customer experience, and sales teams to maintain InfoSec compliance.

Research and implement InfoSec compliance automation tools.

Create and update InfoSec policies and procedures, and assist with awareness training.

Generate reports for stakeholders and maintain an information security risk register.

Job description

About the role

As a Information Security Analyst at VTEX you will partner with compliance, legal, customer experience and sales teams to meet and maintain InfoSec Compliance requirements for frameworks like SOC 2, SOX, PCI-DSS and ISO 27k. In this role, you will:

Research and evaluate emerging InfoSec Compliance automation tools, implement and manage them.
Define how to scale our ability to communicate our InfoSec posture to our current and potential customers.
Be responsible for creating and updating the InfoSec policies and procedures.
Research or conduct internal fact-finding of our current controls.
Assist with the creation, maintenance and delivery of InfoSec awareness training for colleagues
Generate reports for both technical and non-technical staff and stakeholders
Maintain an information security risk register and assist with internal and external audits relating to information security
This is also an excellent opportunity to help shape the future of Security and Privacy for enterprise digital commerce platforms.

About the team

You will be part of our Security & Privacy organization, which provides expertise, tools, and frameworks that enable all teams at VTEX to build secure and reliable systems. You will work on engineering projects with high impact and measurable results that affect the whole company, preventing and eliminating whole classes of threats at once, as opposed to one at a time.

Who you are

Have strong communication skills in English and Portuguese (Spanish would be a bonus) and can convey security and compliance topics to non-technical people unfamiliar with specifics of security.
Capable of summarizing and demonstrating security & compliance capabilities driving discussions with senior leaders in the industry regarding trade-offs, best practices, and risk mitigation.
Known for collaborating effectively and coordinating work across multiple organizations such as product, engineering, customer experience, and sales.
Familiar with at least two of the audit frameworks mentioned above.
Eager to understand at a high level how our enterprise digital commerce platform works.

#LI-Remote

About VTEX

VTEX (NYSE: VTEX) is the composable and complete commerce platform that delivers more efficiency and less maintenance to organizations seeking to make smarter IT investments and modernize their tech stack. Through our pragmatic composability approach, we empower brands, distributors, and retailers with unparalleled flexibility and comprehensive solutions, enabling them to invest solely in what provides a clear business advantage and boosts profitability. VTEX is trusted by 2,400 global B2C and B2B customers, including Carrefour, Colgate, Motorola, Sony, Stanley Black & Decker, and Whirlpool, having 3,400 active online stores across 43 countries (as of FY ended on December 31, 2024).

Founded in the year 2000, VTEX has a history of being unstoppable. Completely against the odds, VTEX is leading a high-tech industry and positioned above market giants. We are building an extraordinary future with more than 1,300 employees scattered across 25 locations in 16 countries in Latin America, North America, Europe, and Asia. For more information, visit www.vtex.com.

At VTEX, you will work in a challenge-driven environment and collaborate with amazing peers. If you are powerful individually, join us, and we will be unstoppable together.

BENEFITS