GRC Leader – Governance, Awareness & Third‑Party Risk Management

About the role

dLocal is looking for a proactive GRC Leader to drive Governance, Security Awareness, and Third‑Party Risk Management across its global security organization. This senior position reports to the Head of GRC & Cyber Assurance and requires hands‑on execution, not just documentation.

Key responsibilities

• Operationalize governance by aligning policies with day‑to‑day practice, renegotiating standards, and ensuring real adoption across security, engineering, and business teams.
• Redefine security awareness communication, creating targeted, high‑ROI interventions (including AI‑assisted delivery) that change behavior.
• Build and manage a Security Champions program, recruiting embedded advocates in engineering and business units.
• Own the global Third‑Party Risk Management (TPRM) program, overseeing payment processor risk and related vendor assessments.

Required profile

• High‑agency leader who takes full ownership of delivery and acts as a tactical bridge between regulatory requirements and operational reality.
• Results‑oriented mindset measured by actual change rather than documentation.
• Strong stakeholder management skills across security, engineering, and business functions.

Required skills

What we offer

• Opportunity to work with a global team of 1,000+ colleagues from 30+ nationalities.
• Impact millions of users daily in fast‑growing emerging markets.
• Dynamic, challenge‑driven environment focused on customer‑centric solutions.