SENIOR SECURITY ENGINEER

Senior Security Engineer

Sao Paulo, Sao Paulo, Brasil

About Stone:

We are much more than just a company of machines! Stone is a technology and financial services company focused on the client.

We were born with the purpose of being protagonists in the transformation of the payment industry, serving the Brazilian entrepreneur and turning their dreams into results.

We are the largest independent company of payment methods in Brazil, with more than fifteen thousand people spread across five regions of the country, in a scenario full of challenges and opportunities. We value teamwork, flexibility, continuous development, and disruptive and tireless thoughts in the search for solutions for our REASON.

Our Culture:

Here, we live our culture in everyday life, guided by these 5 values:

The client is the reason The client is the reason why we exist and we only succeed if they succeed.

Owner mindset We do the right thing, the right way, with responsibility and technology to make better decisions.

Straight to the point Depth to understand and simplicity to solve.

Excellence is a team game We build a long-term business, in a team and with collaboration.

Passion in every detail We do it with passion, attention to detail, and the desire to surprise to help the client to win.

#REMOTE

Team Summary The Technology Governance team is responsible for evaluating, directing, measuring, and monitoring the health and use of technology at Stone. It also acts as a facilitator for cross-technology and business issues.

What it's like to be a Senior Security Engineer This is a strategic and highly dynamic position within the structure of

IT Governance We are looking for a

Senior IT Governance Analyst with a strong executory bias and excellent communication skills. This professional will be the

"operational and tactical engine" of the area. He will act as the right hand of the leadership to absorb the daily workload, allowing management to focus on long-term decisions, while also functioning as a catalyst for agility and a facilitator between technical teams, corporate audit, and information security. It is an opportunity for those who have a problem-solving profile, navigate well in complex environments, manage conflicts, and want to have cross visibility within a robust technology structure that is 100% remote.

Main Responsibilities

• Operational Management of Projects and Demands: Actively participate in the daily follow-up of the area's projects (operational level tending to tactical), ensuring that deliveries occur on time and holding the responsible teams accountable (e.g., task forces for managing end-of-quarter vulnerabilities).
• Mediation and Articulation between Areas: Mediate connections and manage conflicts between internal technology teams and related areas, ensuring the alignment of interests in pursuit of the company's common objective.
• Continuous Improvement of Processes: Identify bottlenecks and remove frictions in current workflows, applying agile methodologies and governance frameworks to optimize deliveries, metrics, and rituals.
• Data-driven decision making: Identify bottlenecks, lack of efficiency, and data-based deliveries (Metrics and Indicators).
• AI as an ally: Use of artificial intelligence for data capture, creation of dashboards, process automation.
• Interface with Audit, Risks, and Security: Handle requests, organize and validate evidence to respond to internal audit inquiries, and support information security and corporate risk fronts.
• Defense of Technology: Translate and technically defend the decisions and technology controls before compliance and audit areas.

Technical Requirements

Solid background and consolidated concepts in

IT Governance and processes. Previous experience in dealing with

Internal Audit , risk mapping, and compliance. Practical knowledge in methodologies of

Project Management and Agility (not just theoretical PMBOK, but agile mindset to unlock deliveries). Practical knowledge in artificial intelligence for creating dashboards, process automation.

Desirable (Plus)

Knowledge of base technology infrastructure (e.g., database, architecture concepts, Cloud / Foundation). Background or experience in corporate

Information Security concepts and Vulnerability Management.

Our Compensation and Benefits Package:

(items with asterisk have specific eligibility rules, which will be explained by recruiters throughout the selection process)

Fixed Salary

Variable Compensation Package* (PLR, ILP or Commission - available according to the eligibility of the position, not being a free choice model)

Health and Dental Plan with co-participation (except for professionals with disabilities who do not have co-participation)

Virtual Hospital Verde: telemedicine team available 24 hours a day, 7 days a week

Subsidy for medicines

Meal Voucher and/or Food Voucher - Pluxee* (except for Commercial Executive(a) positions - 6hrs)

Daycare Allowance (for children up to 5 years and 11 months)

Allowance for Child with Disability

Life Insurance

Fuel allowance or travel allowance *

Home office allowance * (only for Hybrid or Remote contracts)

Welcome kit for new parents

SESC Convention*

Education Benefit - Internal self-development platform (Studa and Stone Library)

Acolhe360º - Emotional support (free)

Quick Massage and Outpatient Clinic*

Optional:

Wellhub - TotalPass - Pet Club - Flash - Férias&Co - VT - Allya - Educational partnerships

* In addition to affirmative positions, all Stone positions are also intended for people with disabilities.