Director of Cybersecurity & Incident Response

About the role

COINS.XYZ Digital Markets, the Brazilian arm of a leading licensed Virtual Asset Service Provider, is establishing a regulated crypto‑asset exchange and custodian. We are seeking a Statutory Director of Cybersecurity and Incident Response who will be registered with the Central Bank of Brazil and hold personal regulatory responsibility for the firm’s cybersecurity posture.

Key responsibilities

• Design, implement and maintain the Cybersecurity Policy, Incident Response Plan and Cloud Services Contracting Policy in line with BCB regulations.
• Oversee protection of private keys and custody architecture, including cold/hot/warm wallets, MPC, multisig and HSM solutions.
• Lead the security operations function (SOC/SIEM, threat intelligence, vulnerability management, penetration testing and red‑team activities).
• Report incidents to the BCB, ANPD (LGPD) and other authorities and coordinate post‑incident remediation.
• Manage third‑party and cloud risk, including vendor due diligence and contractual safeguards.
• Integrate cybersecurity into the broader risk framework alongside Risk, Compliance, AML and IT functions.
• Build and lead the cybersecurity team and promote a security‑by‑design culture.
• Represent the company before regulators, auditors and the Board on cybersecurity matters.

Required profile

• Brazilian residency with an unblemished reputation as defined by BCB regulations.
• Willingness to undergo BCB authorisation procedures and ongoing supervisory scrutiny.
• Bachelor’s degree in Computer Science, Information Security, Engineering or equivalent; postgraduate degree preferred.
• 10+ years of cybersecurity experience, including at least 5 years in leadership roles within financial institutions, fintechs, crypto exchanges or critical‑infrastructure environments.

Required skills

• Cryptographic key management
• Blockchain and smart‑contract security
• Cloud security (AWS, GCP)
• SOC operations and SIEM
• Threat intelligence and threat modelling
• Vulnerability management, penetration testing and red‑team exercises
• Digital forensics
• Data loss prevention (DLP)
• Identity and access management (IAM) and privileged access management (PAM)