{"id":3651610,"url":"https://alion.io/job/ripple-staff-grc-program-manager","title":"Staff GRC Program Manager","company":{"id":4932,"name":"Ripple","domain":"ripple.com","url":"https://alion.io/company/ripple","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":86,"open_postings":16,"ghost_share":0,"stale_share":0.375,"repost_share":0,"time_to_fill_p50_days":74,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Management","role_family":"Management","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["São Paulo, Brazil"],"countries":["BR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Confluence","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"Okta","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-11-02T19:46:52Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-05T15:18:14Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"At Ripple, we’re building a world where value moves like information does today. It’s big, it’s bold, and we’re already doing it. Through our crypto solutions for financial institutions, businesses, governments and developers, we are improving the global financial system and creating greater economic fairness and opportunity for more people, in more places around the world. And we get to do the best work of our career and grow our skills surrounded by colleagues who have our backs. \nIf you’re ready to see your impact and unlock incredible career growth opportunities, join us, and build real world value.\nTHE WORK:\nRipple is expanding its Information Security function and is seeking an experienced Information Security professional to join us in building a world-class Information Security program.\nThis is a critical role based in our Brazil entity, integral to establishing Ripple's local operational presence and governance to operate as a Sociedade Prestadora de Serviços de Ativos Virtuais (SPSAV/VASP). This position will be key in building and delivering a strong information security and ICT risk program locally, supporting Ripple’s expansion of regulated digital asset activities across Latin America.\nWHAT YOU’LL DO:\nServe as the operational lead for cybersecurity governance, risk management, and compliance in Brazil. Work directly with local leadership on the entity's information security program and incident-response capabilities.\nPrepare, coordinate, and directly support local leadership in regulatory authorization review, ongoing supervisory engagements, and examinations.\nProvide periodic updates to Ripple Brazil's board and management on the InfoSec program, ICT risk posture, and regulatory developments.\nMaintain compliance with Brazilian regulatory and security frameworks relevant to virtual asset service providers, such as central bank cybersecurity and data protection requirements.\nMap new and evolving guidance issued by the BCB, COAF, and ANPD to Ripple's internal security controls library to identify gaps and enhancement opportunities.\nScope, plan, and independently conduct periodic technical control testing to validate the effectiveness of information security controls across our cloud, infrastructure, and application environments.\nDirectly access systems to pull technical evidence (logs, system settings, access reports) for control testing, audits, and independent assurance reviews.\nCollaborate with global InfoSec teams to develop, maintain, and localize InfoSec Policies, Standards, and Procedures for local regulatory and data protection compliance.\nLead local oversight of outsourced IT, custody-adjacent, and security service providers, including third-party due diligence and contingency-planning obligations for relevant service providers.\nSupport Ripple Brazil's Data Protection Officer on security-of-processing matters.\nSupport group-wide Information Security GRC initiatives, ensuring cross-entity alignment as Ripple's regulated footprint in Latin America grows.\nPartner with global Information Security, Engineering, Compliance, Finance, Product, Legal, and Sales teams to provide security guidance with direct impact on Ripple's product security and customer trust in Brazil.\nSupport regional customer-facing activities, including drafting Brazil-specific security messaging, responding to security due diligence questionnaires, and reviewing customer security contractual language.\nDevelop and maintain information security policies, standards, GRC process documentation, system workflows, and evidence collection procedures.\nAttend and participate in Brazilian and regional digital asset industry events and discussions to stay current on evolving regulation, threats, and best practices.\nWHAT YOU'LL BRING: \n5+ years of experience in information security risk management and compliance, ideally including direct exposure to a BCB-regulated (or equivalent) financial institution's authorization or examination process.\nA Bachelor's Degree in a relevant field or equivalent professional experience.\nBased in Brazil, with proven experience in the Brazilian financial or FinTech sector and a strong working understanding of the BCB regulatory landscape.\nSolid understanding of the BCB's PSAV/SPSAV framework and familiarity with the LGPD.\nProficiency with common information security frameworks, such as ISO 27001, SOC2, NIST, and CSA Cloud Controls Matrix (CCM).\nA proven understanding of information security governance in the context of cloud-native FinTech companies operating in a distributed and fast-moving environment.\nComfortable working independently in technical environments, quickly learning new systems and processes.\nHands-on experience pulling and analyzing technical evidence, including system logs, configuration data, audit reports, and database queries.\nAbility to develop clear, audience-tailored documentation, SOPs, and training content.\nExperience collaborating effectively with multi-functional teams of engineers, product managers, and compliance experts.\nFamiliarity with tools such as Jira, Confluence, Okta, AWS, Tines, and integrated GRC platforms.\nDesirable certifications include CISSP, CISM, CISA, and AWS Certified Security.\nFluency in Portuguese; professional proficiency in English.\nWHO WE ARE:\nDo Your Best Work\nThe opportunity to build in a fast-paced start-up environment with experienced industry leaders\nA learning environment where you can dive deep into the latest technologies and make an impact. A professional development budget to support other modes of learning.\nThrive in an environment where no matter what race, ethnicity, gender, origin, or culture they identify with, every employee is a respected, valued, and empowered part of the team.\nIn-office collaboration for moments that matter is important to our culture, and we give managers and teams the flexibility to decide which 10+ days a month they come in. \nBi-weekly all-company meeting - business updates and ask me anything style discussion with our Leadership Team\nWe come together for moments that matter which include team offsites, team bonding activities, happy hours and more!\nTake Control of Your Finances\nCompetitive salary, bonuses, and equity\nCompetitive benefits that cover physical and mental healthcare, retirement, family forming, and family support\nEmployee giving match\nMobile phone stipend\nTake Care of Yourself\nR&R days so you can rest and recharge\nGenerous wellness reimbursement and weekly onsite & virtual programming\nGenerous vacation policy - work with your manager to take time off when you need it\nIndustry-leading parental leave policies. Family planning benefits.\nCatered lunches, fully-stocked kitchens with premium snacks/beverages, and plenty of fun events\nBenefits listed above are for full-time employees. \nRipple is an Equal Opportunity Employer. We’re committed to building a diverse and inclusive team. We do not discriminate against qualified employees or applicants because of race, color, religion, gender identity, sex, sexual identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, military status, or any other characteristic protected by local law or ordinance.\n\nPlease find our California, UK/EU, Singapore, DIFC, ADGM, Australia, and Switzerland Applicant Privacy Notice for reference.","description_format":"text","description_chars":7389,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"Portuguese","level":"Advanced (C1)","optional":true},{"language":"English","level":"Advanced (C1)","optional":true}]},"benefits":["Equity","Generous vacation","Growth opportunities","Parental leave","Professional development"],"hiring_locations":[{"name":"Brazil","iso":"BR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Software & Embedded Finance","Blockchain Infrastructure","Crypto Payments","Stablecoins"],"lifecycle":[{"event":"open","at":"2026-11-03T00:18:23Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":74,"reasons":["conf:1","velocity","win:early","comp:brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/ripple-staff-grc-program-manager","json_url":"https://alion.io/job/ripple-staff-grc-program-manager.json","meta":{"generated_at":"2026-11-05T16:39:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22009,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4932},"rest":"https://alion.io/mcp/rest/get_company?id=4932"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fripple-staff-grc-program-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fripple-staff-grc-program-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fripple-staff-grc-program-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ripple-staff-grc-program-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fripple-staff-grc-program-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3651610}},{"tool":"search_jobs","arguments":{"company":"ripple.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3651610},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}