Why should you join dLocal?

dLocal enables the biggest companies in the world to collect payments in 40 countries in emerging markets. Global brands rely on us to increase conversion rates and simplify payment expansion effortlessly. As both a payments processor and a merchant of record where we operate, we make it possible for our merchants to make inroads into the world’s fastest‑growing, emerging markets.

By joining us you will be a part of an amazing global team that makes it all happen. Being a part of dLocal means working with 1000+ teammates from 30+ different nationalities and developing an international career that impacts millions of people’s daily lives. We are builders, we never run from a challenge, we are customer‑centric, and if this sounds like you, we know you will thrive in our team.

About Us & The Role

The Security Department at dLocal is lean, forward‑thinking, and operates at the intersection of a hyper‑growth fintech and the world’s most complex emerging markets. We believe security is a business enabler—not a gatekeeper—and we build our team accordingly.

This is a newly created, senior IC role sitting directly in the CISO’s office. We are looking for a Cybersecurity Programs & Delivery Lead who will serve as the strategic execution engine of the security department—someone who takes the CISO’s vision and translates it into structured, measurable, and relentlessly driven delivery.

You will work as a peer alongside the Department Heads. Where they own the technical and domain depth, you own the operational backbone that connects everything: strategy to execution, ambiguity to structure, initiative to outcome.

This is not a coordination role. We are not looking for a project manager who tracks tasks. We are looking for a cybersecurity professional who has decided they want to use their subject‑matter expertise to drive strategy, own programs end‑to‑end, and act as a force multiplier across the entire department—without needing direct reports to make things happen.

You will have the CISO and security leadership as your executive umbrella: the sponsorship, the political cover, and the pragmatic air support to make trade‑offs and remove blockers. What we need from you is the street‑smart execution to take that mandate and run with it.

What You’ll Do

Turn Strategy into Structured Execution

- Architect the Strategic Roadmap & OKRs: partner with the CISO and the security leadership to translate long‑term security goals into a multi‑quarter prioritized roadmap, balancing technical debt, compliance needs, and innovation projects against team capacity and company priorities.
- Break It Down: decompose high‑level CISO security strategy into actionable, sequenced delivery plans with clear owners, milestones, and success criteria. Bridge the gap between vision and shipped.
- Drive Program Ownership: own the end‑to‑end lifecycle of cross‑cutting security initiatives—from scoping and stakeholder alignment to delivery and retrospective—allowing technical leads to stay in their lane.




- Unblock & Accelerate: identify bottlenecks, dependencies, and organizational friction before they become delays, ensuring momentum is maintained.

Stakeholder Navigation & Change Management

- Be the Diplomat: act as the primary interface between the Security Department and key stakeholders—Engineering, Product, Operations, Legal, Finance, and Commercial—negotiating, aligning, and influencing without formal authority.
- Drive Change & First‑Line Accountability: lead the organizational change management of security programs; own the rollout, buy‑in, and behavioral change to ensure risk accountability is shifted left.
- Treat Airtime as Currency: focus on high‑signal, high‑ROI interactions—eliminating noise and generic broadcasts.

Reporting, Metrics & Business Intelligence

- Own the Security Dashboard: build and maintain a single source of truth for the department’s performance, designing KPIs and program health metrics for teams and executives.
- Make Data‑Driven Decisions: translate complex security posture data into actionable narratives for the CISO, Board, and key partners.
- Run the Reporting Cadence: manage weekly ops reviews, monthly leadership updates, and quarterly board packs—ensuring the right information reaches the right audience at the right time.

Vendor Management & Budget Support

- Manage the Vendor Landscape: oversee vendor relationships—contract milestones, SLA tracking, renewals, and performance reviews—in coordination with Procurement and Legal.
- Support Budget Management: partner with the CISO on budget planning, tracking, and forecasting, flagging risks or optimization opportunities.
- Build the Security Investment Story: translate technical requirements into clear business cases for new initiatives, aligning investments with dLocal’s hyper‑growth and risk appetite.

Automate & Scale

- Systematize Everything: identify manual, repetitive processes, define workflows for automation by the Security Engineering team, eliminating root inefficiencies.
- AI‑Augmented Execution: leverage modern AI tools to accelerate documentation, stakeholder communications, and gap analysis while ensuring accuracy and governance.

What You Bring

- You are a cyber professional first, with a solid foundation in cybersecurity—technical, GRC, or consulting—and earn respect without a title.
- You own outcomes, not tasks, and are self‑driven, proactive, and allergic to ambiguity.
- Exceptional organizational navigation: high EQ and IQ, moving seamlessly across levels and functions.
- Disciplined multi‑threading: manage multiple complex programs simultaneously without losing grip.
- Communication is your superpower:



write and speak with clarity, economy, and impact, distilling complex programs into concise briefings.
- Pragmatic & street‑smart: find the right trade‑off between security idealism and business reality, keeping the business moving while managing risk.
- Zero ego, full versatility: chase people down over Slack, build spreadsheets, sit in vendor calls—deliver results at whatever altitude is needed.

AI Fluency:

You are comfortable using AI tools as a co‑pilot for drafting, planning, and analysis, ensuring data accuracy and hallucination governance.

Nice to Have

- Background in a fast‑paced fintech, payments, or technology scale‑up environment.
- Familiarity with security frameworks (PCI DSS, ISO 27001, SOC 2, NIST).
- Experience with formal program/portfolio management methodologies (PMI, SAFe, OKRs) or certifications (PMP, CISSP, CISM).
- Experience operating in emerging markets or global, multi‑jurisdictional environments.
- Prior experience as a chief‑of‑staff, security strategy lead, or CISO advisor.

How You’ll Work

You will operate with a high degree of autonomy, sitting at the center of the CISO’s office and touching every dimension of the security department. This is a visible, high‑trust role. You will be expected to take ownership with minimal hand‑holding, make judgment calls under ambiguity, and proactively raise issues before they escalated.

You will not manage a team—but you will influence, align, and mobilize everyone. Your authority comes from expertise, credibility, and the CISO's mandate. If that energizes you rather than frustrates you, this role is built for you.

What do we offer?

- Flexibility: we have versátil schedules and are driven by performance.
- Fintech industry: work in a dynamic and ever‑evolving environment, with plenty to build and boost your creativity.
- Referral bonus program: internal talent referrals rewarded.
- Learning & development: access to a Premium Coursera subscription.
- Language classes: free English, Spanish, or Portuguese classes.
- Social budget: monthly budget to chill out with your team, in person or remotely.
- dLocal Houses: rent a house anywhere in the world for team coworking.

Flexibility in how you work:

We focus on impact and productivity over fixed hours. Teams have flexible schedules and combine self‑managed focus time with moments of in‑person connection in our collaboration hubs.

What happens after you apply?

Our Talent Acquisition team is invested in creating the best candidate experience possible, so you will definitely hear from us. We will review your CV and keep you posted by email at every step of the process!

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

#J-18808-Ljbffr

📌 Cybersecurity Programs & Delivery Lead - dLocal (Madrid)
🏢 Talent
📍 Madrid