Stone - Linkedin

Oct 29, 2026

[SI/LGPD] Security Engineer JR/PL

Germany

Hamburg, Germany

Automatic translation. Check the original.

About Stone

We are much more than a card machine company! Stone is a technology and financial services company focused on the customer.

We were born with the purpose of being protagonists in the transformation of the payments industry, serving the Brazilian entrepreneur and turning their dreams into results.

We are the largest independent payment processing company in Brazil, with more than fifteen thousand people spread across the five regions of the country, in a scenario full of challenges and opportunities. We value teamwork, flexibility, continuous development, and disruptive thinking, and we are tireless in the search for solutions for our PURPOSE.

Our Culture

Around here, we live our culture every day, guided by these 5 values:

💚 The customer is the reason The customer is the reason we exist, and we only succeed if they succeed.

⚡ Owner mindset We do what is right, the right way, with responsibility and technology to make better decisions.

🎯 Straight to the point Depth to understand and simplicity to solve.

🤝 Excellence is a team sport We build a long-term business, as a team and with collaboration.

✨ Passion in every detail We work with passion, attention to detail, and a desire to surprise to help the customer win.

What it's like to be a Privacy and Data Protection professional at Stone

You will work in a multidisciplinary team that supports secure innovation and LGPD compliance on three fronts: you will be the bridge between Legal, Business areas, and Technology, directing regulatory controls such as data inventories, Data Protection Impact Assessments (DPIA), balancing tests, retention strategies, and data subject request fulfillment, in addition to translating these requirements into technical specifications for each squad and consolidating Privacy by Design practices; you will evaluate, guide, monitor, and develop AI tools, adjusting the governance of these systems to LGPD standards to mitigate risks of leaks or algorithmic biases, while maintaining strong ethical and security alignment; and you will work side-by-side with the Information Security area in the prioritization of daily technical controls and corporate incident response, always with a focus on mitigating risks and ensuring the rights of data subjects.

What we expect from you

Cultural Change: Prepare materials, train teams, and raise awareness across the company about Privacy and Data Protection to empower employees with compliance autonomy.

Mapping and Investigation: Support the maintenance and updating of the personal data inventory and the Record of Processing Activities (ROPA), based on information provided and validated by the responsible areas.

Privacy Engineering (Privacy by Design): Support the development of new products/projects to ensure that privacy is considered from the very beginning of their creation. This involves directing technical controls, such as: encryption, anonymization, and data minimization.

Privacy Impact Assessment: Act proactively in identifying risks in operations involving personal data, providing strategic support to the Data Protection Officer. This involves formalizing compliance and monitoring remediation plans, such as: conducting preliminary assessments (PIA), preparing and maintaining updated Data Protection Impact Assessments (DPIA), and managing action plans resulting from audits and mapping, controlling owners, deadlines, and consolidating evidence of compliance with the involved areas.

Privacy Operations: Support daily activities of the governance program to ensure continuous compliance with the LGPD. This involves executing practical area processes, such as: managing and responding to data subject requests, risk assessments in the hiring of suppliers and partners, data sharing assessments, support during incidents, and managing access to personal data masking in the data lake.

AI Applied to Privacy (Privacy Tech): Use artificial intelligence tools to optimize, scale, and bring efficiency to the internal processes of the governance program.

Privacy Regulations and Documents: Support the structuring and continuous review of the entire data protection documentation framework, ensuring alignment with the Data Protection Officer's guidelines. This involves drafting and submitting drafts for validation by the competent areas, such as: internal policies, operational procedures, privacy notices, terms, and contractual clauses.

Indicator Management: Support the traceability and measurement of the success of the Privacy Program, providing data to support the Data Protection Officer's decision-making. This involves extracting and analyzing area indicators, preparing executive reports for DPO validation, and systematically organizing records and evidence of data protection.

What increases your chances

Higher education in Information Technology, Information Systems, Information Security, or related fields.

Market Certifications: Possess recognized certifications in Privacy and Security (e.g., IAPP - CIPP/E, CIPM, CIPT; EXIN - DPO, PDPP, PDPE; or ISACA - CDPSE).

Experience in Technology and Information Security controls.

Experience in the Financial Sector: Proven track record in Banks or Financial Institutions.

International and AI Regulations: Practical knowledge of GDPR and monitoring of global and local regulatory agendas regarding Artificial Intelligence (such as the European AI Act and Bill 2338/23 in Brazil).

Language: English

#Li-remote

*In addition to affirmative vacancies, all Stone vacancies are also intended for people with disabilities.

Our Compensation and Benefits package

(items with an asterisk have specific eligibility rules, which will be explained by the recruiters throughout the selection process)

💸 Fixed Salary

💰 Variable Compensation Package* (Profit Sharing, Long-Term Incentives, or Commission - provided according to job eligibility, not a free-choice model)

🏥 Health and Dental Plan with co-payment (except for professionals with disabilities who do not have co-payment)

🩺 Virtual Hospital Verde: telemedicine team available 24 hours a day, 7 days a week

💊 Medication subsidy

🍽️ Meal Voucher and/or Food Voucher - Pluxee* (except for Commercial Executive roles - 6hrs)

👶 Daycare Assistance (for children up to 5 years and 11 months old)

💙 Assistance for Children with Disabilities

🛡️ Life Insurance

⛽ Fuel allowance or commuting allowance *

🏠 Home office allowance * (only for Hybrid or Remote contracts)

🎁 Welcome Kit for new parents

🏢 SESC membership*

📚 Education Benefit - Internal self-development platform (Studa and Stone Library)

🧠 Acolhe360º - Emotional support (free)

💆 Quick Massage and Clinic*

Optional:

Wellhub - TotalPass - Pet Club - Flash - Férias&Co - Transportation Voucher - Allya - Educational partnerships

Languages

[SI/LGPD] Security Engineer JR/PL

About Stone

Our Culture

What it's like to be a Privacy and Data Protection professional at Stone

What we expect from you

What increases your chances

Our Compensation and Benefits package

Show your skills.Get discovered.

More opportunities with one profile

Keep exploring

Staff Full-Stack Engineer (w/m/d)

Senior Pre-Sales Solutions Engineer

IT Systemintegrator (m/w/d)