Tech Lead Compliance | InfoSec

Apply now for a career that puts wellbeing first!

GET TO KNOW US

Gympass is a corporate wellness platform that connects you to thousands of fitness & wellness partners, all with one simple monthly membership. Founded in 2012 and headquartered in NYC, we have a growing global team in 11 offices around the world. At Gympass, you not only have the opportunity to build a career in a fast-paced global environment - but you'll make wellbeing universal, so everyone can be happy and healthy. 

THE OPPORTUNITY

We are hiring a Tech Lead Compliance to our InfoSec team in Brazil! 

The mission of the Infosec team is to make Gympass a safer company for its customers, partners, subscribers, and employees by protecting the entire ecosystem from internal and external threats and contributing to the creation of secure products.

This role is critical in fortifying our information security compliance efforts and ensuring adherence to ISO27001, PCI-DSS, and Privacy Regulations in all countries we operate. As a part of our dedicated team, your expertise in governance, compliance and risk management will be fundamental in developing safe and secure solutions across the company. This position offers the unique opportunity to oversee our cybersecurity initiatives and mentor and grow the capabilities of other security engineers, shaping the future of security at Gympass.

YOUR IMPACT

• Lead the compliance strategy integrating ISO27001 and PCI-DSS controls to our products and corporate infrastructure.
• Maintain and improve our risk management, vendor management and clients due diligence process.
• Conduct comprehensive internal audits and manage third-party audits, being the point of contact for the external auditors.
• Implement effective tools and processes to maintain continuous compliance and risk monitoring.
• Provide guidance and mentorship to team members, fostering their professional growth through regular feedback and personalized development plans.
• Promote a culture of high awareness and understanding of compliance and risk management standards within Gympass.
• Collaborate with various teams to embed compliance and risk management principles into their operational processes.
• Live the mission: inspire and empower others by genuinely caring for your own wellbeing and your colleagues. Bring wellbeing to the forefront of work, and create a supportive environment where everyone feels comfortable taking care of themselves, taking time off, and finding work-life balance.

WHO YOU ARE

• You have experience in ISO27001, and PCI DSS standards, including leading internal and third-party audits.
• You have developed, implemented, and maintained policies, procedures and standards that align with the best practices and industry standards.
• You have maintained third-party risk management , security risk management and client due diligence processes.
• You have a proven track record of managing the day-to-day operations of security compliance team, ensuring that they are engaged and supported and providing constructive feedbacks.
• Your skills in communication and interpersonal interactions are exceptional, enabling you to lead and develop your team effectively.
• You thrive in dynamic and fast-paced environments and are committed to upholding the highest compliance and risk management standards.
• A team player who can collaborate effectively with diverse stakeholders and communicate complex technical concepts clearly and concisely to all levels.
• You are fluent in English.

We recognize that individuals approach job applications differently. We strongly encourage all aspiring applicants to go for it, even if they don't match the job description 100%. We welcome your application and will be delighted to explore if you could be a great fit for our team. For this specific role, please note that prior experience leading internal and third-party audits and managing the day-to-day operations of security compliance team are mandatory requirements. 

WHAT WE OFFER YOU 

We're a wellness company that is committed to the health and well-being of our employees. Our flexible program allows you to customize your benefits, according to your needs! 

Our benefits include:

WELLNESS: Health, dental, and life insurance.

FLEXIBLE WORK: Choose when and where you work. For most, this will be a hybrid office/remote structure but can vary depending on the needs of the role and employee preferences. We offer all employees a home office stipend and a monthly flexible work allowance to help cover the costs of working from home.

FLEXIBLE SCHEDULE: We understand that together, Gympassers and their leaders can make the best decisions for their own individual scopes. This includes flexibility to adjust their working hours based on their personal schedule, time zone, and business needs.

GYMPASS: We believe in our mission and encourage our employees and their families to find their passion too. Access onsite gyms and fitness studios, digital fitness programs, and online wellness resources for meditation, nutrition, mental health support, and more. You will receive the Gold plan at no cost, and other premium plans will be significantly discounted.

PAID TIME OFF: We know how important it is that our employees take time away from work to recharge. 

Vacations after 6 months and 3 days off per year + 1 day off for each year of tenure (up to 5 additional days) + extra day off for your birthday.

PAID PARENTAL LEAVE: Welcoming a new child is one of the most special moments in your life and we want our employees to take the time to be present and enjoy their growing family.

100% paid parental leave of 6 weeks to all new parents, of both biological and adopted children, regardless of gender and parent's relationship with the co-parent, Also extended maternity leave under local legislation 

CAREER GROWTH: Outstanding opportunities for personal and career growth. That means we maintain a growth mindset in everything we do and invest deeply in employee development.  

CULTURE: An exciting and supportive atmosphere with ambitious people from around the world! You’ll partner with global colleagues and share in the success of a high-growth technology company disrupting the health and wellness space. Our value-based culture of trust, flexibility, and integrity makes this possible every day. Find more info on our careers page! 

And to get a glimpse of Life at Gympass… Follow us on Instagram @gympasscareers and LinkedIn!

Diversity, Equity, and Belonging at Gympass

We aim to create a collaborative, supportive, and inclusive space where everyone knows they belong.

Gympass is committed to creating a diverse work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex, gender identity or expression, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law.

Questions on how we treat your personal data? See our Job Applicant Privacy Notice.

#LI-REMOTE