Role Description The Enterprise Architect collaborates with business and technology teams to ensure that technology solutions are aligned with the targeted business strategies and expected outcomes. The Enterprise Architect also plays a role in defining the future state IT strategy and ensuring alignment with enterprise standards and practices. Their role involves working with and guiding the organization’s architects to build and promote enterprise standards, roadmaps, and strategies that align with the organization’s goals and objectives. What You Will be Doing: - Provides guidance and design standards for the architecture, including Business Architecture, IT Strategy Facilitation, Strategic Portfolio Development, and Technical Architecture Domains. - Offers professional expertise with broad technical, analytical, and communication skills reflecting knowledge about industry best practices and emerging trends for Meijer. - Aligns Architectural Runway to SAFe Agile Development and provides leadership and oversight to ensure interoperability, scalability, and portability of applications. - Strives for optimum proficiency in all aspects of enterprise solutions and services, including business process, end user experience, applications, databases, integrations, and infrastructure. - Collaborates with architects to achieve strategic and operational objectives relating to the Enterprise roadmap. - Ensures alignment to security architecture standards and secure coding practices. - Leads the development and oversight of architecture documentation, including roadmaps, foundation principles, schematics, guidelines, enterprise standards, and compliance. - Develops and facilitates the implementation of architectural policies, standards, procedures, and templates. - Defines and integrates a culture of ownership for architecture standards and design patterns. - Analyzes the effectiveness of architectural decisions to ensure best practices meet strategic goals. - Provides input to annual budget reviews for technology investments to ensure alignment with strategic goals. - Reviews and evaluates vendor proposals for adherence to architectural guidelines and investment strategy. Qualifications - Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Systems Analysis, or related discipline. - 8 years’ experience in at least two IT disciplines in a multi-tier environment, including technical architecture, network management, application development, package delivery, middleware, database management, or operations planning. - Ability to disambiguate complex ideas and communicate in a simple and compelling way to a wide variety of audiences. - Knowledge of business, technology, industry, and market ecosystems. - Innovative thinking and behavior to drive organizational strategies. - Exposure to multiple, diverse technical configurations, technologies, and processing environments. - Ability to analyze trends and disruptions and assess their impact on targeted business outcomes. - Drive the evolution of the EA team's services and operating model. - Breadth of knowledge in technologies, platforms, and domains. - Strong interpersonal skills, including teamwork, facilitation, and negotiation. - Strong analytical and technical skills. - Excellent written and oral communication skills. - Excellent planning and organizational skills. - Knowledge of the components of a technical architecture. - Knowledge of business re-engineering principles and processes. - Basic knowledge of financial models and budgeting. - Understanding of the political climate of the enterprise and navigation of politics. - Ability to understand long-term and short-term perspectives of situations. - Ability to translate business needs into technical architecture requirements. - Ability to estimate the financial impact of technical architecture alternatives. - Ability to apply multiple technical solutions to business problems. - Quickly comprehends the functions and capabilities of new technology. Benefits - Meijer Rewards - Weekly pay - Scheduling flexibility - Paid parental leave - Paid education assistance - Team member discount - Development programs for advancement and career growth

• Serve as the engineering subject matter expert for Moderna’s Privileged Access Management program, owning the CyberArk platform and its associated components. • Manage the configuration, administration, maintenance, and ongoing optimization of the CyberArk environment. • Collaborate with business units, application owners, and engineering teams to understand requirements and translate business needs into secure and scalable PAM solutions and technical designs. • Conduct stakeholder interviews and gather application, service, and infrastructure information to support CyberArk onboarding activities. • Define and articulate business and functional requirements based on evolving industry best practices, emerging technologies, and organizational needs. • Partner with DevOps, systems, network, cybersecurity, and infrastructure teams to ensure privileged access management standards are consistently implemented and maintained. • Perform application integration assessments and provide technical guidance on CyberArk integration approaches and options. • Lead and manage the onboarding of privileged accounts into CyberArk, ensuring adherence to established design frameworks and operational standards. • Develop and maintain end-user documentation, knowledge articles, standards, and training materials to support adoption and operational excellence. • Create detailed architecture documentation, implementation plans, technical standards, and solution designs. • Evaluate the existing PAM environment to identify technical, operational, and security enhancement opportunities, driving continuous improvement initiatives. • Participate in disaster recovery planning, capacity management, performance monitoring, maintenance activities, and platform resilience efforts to ensure high availability. • Work closely with Cybersecurity and Governance teams to ensure PAM solutions align with corporate security policies, regulatory requirements, and established standards. • Regularly review, evaluate, and enhance PAM policies, procedures, and controls to maintain strong security compliance and operational effectiveness. • Develop, support, and maintain security policies, standards, and operational processes related to privileged access management. • Stay current on industry trends, threat landscapes, emerging technologies, and evolving identity security practices to help ensure Moderna’s IAM and PAM strategies remain effective and future ready. • Contribute to the overall cybersecurity posture of the organization through adherence to security policies, procedures, and best practices. • Support emergency incidents and planned maintenance activities, including participation in 24x7 support requirements when necessary.

Role Description Na Avenue, somos movidos por um propósito claro: expandir o potencial do investidor brasileiro, fazendo sua vida render mais — em dólar. Isso significa oferecer acesso a oportunidades globais de investimento, com produtos, serviços e experiências que ajudam nossos clientes a construir um futuro financeiro mais sólido, diversificado e conectado ao mundo. Buscamos uma pessoa com interesse em segurança de aplicações, olhar crítico e vontade de aprender na prática, contribuindo para a construção de soluções mais seguras e robustas — a atuação é focada em desenvolvimento e engenharia de segurança, sem atividades de pentest. Você atuará junto às squads de engenharia, apoiando iniciativas de segurança e evoluindo tecnicamente em um ambiente dinâmico e colaborativo. O foco está em segurança aplicada ao desenvolvimento (DevSecOps/AppSec), construção de ferramentas, análise de código e evolução contínua das práticas de engenharia segura. No seu dia a dia, você terá como responsabilidade: - Contribuir na remediação de vulnerabilidades identificadas nos repositórios dos times de engenharia, escrevendo e revisando código em Go. - Apoiar iniciativas de cultura de segurança junto aos times de engenharia. - Participar do desenvolvimento e evolução de ferramentas de segurança utilizadas internamente. - Apoiar na elaboração de modelagem de ameaças, definição de requisitos de segurança e análises de risco de aplicações. - Operar ferramentas de SAST, SCA e DAST, realizando triagem de achados e acompanhando as remediações com as squads. - Apoiar na triagem de reportes de Bug Bounty e VDP. Qualifications - Estar cursando Ciência da Computação, Engenharia de Software, Sistemas de Informação ou áreas correlatas. - Conhecimento dos projetos OWASP (não se limitando ao Top 10) e fundamentos de secure coding. - Conhecimento em Go (mesmo que inicial ou acadêmico). - Familiaridade com metodologias ágeis de desenvolvimento. - Conhecimento em Git e GitHub. - Noções de bancos de dados relacionais e comunicação entre serviços (REST, gRPC, mensageria). - Inglês técnico para leitura de documentação. Requirements - Não é obrigatório, mas seria incrível se você também possuir: - Conhecimento ou interesse no mercado financeiro. - Experiência prévia com segurança de aplicações. - Familiaridade com GCP ou outros provedores de nuvem. - Contato com ferramentas como GitHub Advanced Security, Semgrep, Wiz ou similares. - Contribuição em projetos open source. Benefits - Vale refeição e vale alimentação atrativos; - Plano de Saúde Omint; - Plano Odontológico Amil; - Seguro de vida Bradesco; - Wellhub ou TotalPass; - Auxílio home office no valor de R$200 mensais; - Home office boost de R$2.000 para estrutura inicial; - Incentivo educacional (cursos, certificações e eventos); - Day off no mês do aniversário; - Psicologia Viva: sessões de terapia online gratuitas; - Auxílio creche de R$455 para filhos(as) de até 5 anos; - Licenças maternidade e paternidade estendidas (Empresa Cidadã); - Bônus semestral (conforme política interna); - Corretagem gratuita + benefícios em câmbio no app da Avenue; - USD 100 no primeiro salário para começar a investir com a gente.

Role Description Information Security Governance, Risk & Compliance Lead - Establish and maintain an enterprise information security governance framework aligned to the prospective client's business objectives, risk appetite, and regulatory requirements. - Develop, maintain, and enhance information security policies, standards, control frameworks, and governance processes aligned to recognised frameworks such as ISO/IEC 27001, NIST, and CIS Controls. - Conduct information security risk assessments, manage the security risk register, oversee risk treatment activities, and support internal, external, and regulatory audits. - Lead third-party and vendor security risk assessments, particularly for outsourced and technology-enabled services. - Design, implement, and maintain an Information Security Management System (ISMS), ensuring integration with broader risk management and governance structures, while supporting certification and continuous improvement initiatives. - Establish and oversee security operations governance, including incident response, cyber resilience, disaster recovery, and business continuity security requirements. - Monitor and report on key security, risk, compliance, and operational metrics, providing regular updates and strategic recommendations to executive management and governance forums. - Drive security awareness, training, and capability-building initiatives to promote a strong security culture and strengthen internal competencies. - Advise senior stakeholders on information security strategy, investment priorities, and risk-based decision-making, while representing the prospective client in engagements with auditors, regulators, and key third parties. Company Description