Data Security Specialist

The role

The Data Security Specialist runs and operates the data security controls for iFood's corporate and production data. The role covers implementing controls, investigating incidents and operating the tools that protect iFood's data assets. It is an individual contributor role.

What you will do

• Operate and evolve DLP and ZTNA controls for endpoints, cloud applications and communication channels
• Implement and enforce data classification and handling policies aligned with LGPD, GDPR, BACEN and PCI-DSS
• Configure and maintain security controls for SaaS platforms such as Databricks, Salesforce and Google Workspace
• Run the insider threat program, including behavioral analytics rules and cases coordinated with HR and Legal
• Conduct security reviews of production data architecture, including APIs, ETL pipelines and file transfers
• Execute the Data Security workstream in Third-Party Risk Management
• Drive AI adoption in data security workflows and report measurable results
• Act as technical Data Security reference for adjacent teams and lead data-focused investigations during incidents
• Build and maintain Data Security dashboards and metrics
• Document runbooks, playbooks and standard operating procedures

Required qualifications

• Proven experience as Data Security Specialist, Analyst or Engineer with technical ownership of a Data Security domain
• Strong experience in data protection, DLP, ZTNA and information security governance
• Solid understanding of Zero Trust architecture and its practical implementation
• Deep knowledge of SaaS security hardening (Google Workspace, Salesforce, Databricks)
• Knowledge of data architecture concepts: APIs, ETL pipelines, data warehouses and cloud data platforms
• Familiarity with LGPD, GDPR, PCI-DSS and BACEN and PROUF regulatory requirements
• Practical experience with AI tools for Data Security, with documented measurable results
• Strong analytical and investigative skills, from signal to root cause
• Ability to collaborate cross-functionally with Legal, Engineering, Product and IT
• Ability to create runbooks, playbooks and operating procedures
• Advanced English (mandatory)

Nice to have

• Experience with SASE platforms (Netskope, Zscaler or similar) and DSPM tools (Netskope, Cyera, Wiz or similar)
• Experience in data engineering or analytics, including pipeline architecture and data warehousing
• Experience adopting AI in Data Security operations
• Certifications: CISM, CDPSE, CISSP or equivalent
• Experience in a regulated sector (fintech, banking, payments, health tech)

Before you apply

• English at advanced level is mandatory

About the company

iFood is a Brazilian technology company and a reference in Latin America, connecting restaurants to consumers with around 100 million orders per month. It also operates Mercado, Farmácia, Pet and the iFood Pago fintech.