Junior Security Engineer

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Collaborate within a multidisciplinary team, acting as a liaison among Legal, Business, and Technology departments.

• Lead privacy regulatory measures, which include managing data inventories, conducting Data Protection Impact Assessments (DPIAs), performing balancing tests, overseeing retention, and handling data subject requests.

• Convert regulatory requirements into technical specifications for project squads and enhance Privacy by Design methodologies.

• Evaluate, guide, monitor, and develop AI tools in compliance with Brazil’s General Data Protection Law (LGPD).

• Reduce risks associated with data leakage and algorithmic bias.

• Partner with Information Security teams to prioritize technical controls and address corporate incidents.

• Create training materials, educate teams, and promote employee awareness regarding Privacy and Data Protection.

• Assist in maintaining the personal data inventory and Records of Processing Activities (ROPA).

• Provide support for products and projects that require encryption, anonymization, and data minimization controls.

• Execute preliminary privacy impact assessments, maintain DPIAs, and manage remediation strategies.

• Address data subject requests and evaluate risks tied to vendors, partners, and data sharing practices.

• Aid in incident response and manage access to personal data masking within the data lake.

• Leverage AI to enhance processes within the internal governance program.

• Assist in drafting and reviewing policies, procedures, privacy notices, terms, and contractual clauses.

• Extract and analyze metrics, prepare executive-level reports, and organize records and evidence related to data protection.

⛳️ Requirements

• Bachelor’s degree in Information Technology, Information Systems, Information Security, or a related discipline (preferred).

• Valid Privacy and Security certifications, such as IAPP CIPP/E, CIPM, or CIPT; EXIN DPO, PDPP, or PDPE; or ISACA CDPSE (preferred).

• Background in Technology and Information Security controls.

• Demonstrated experience in banking or financial institutions.

• Hands-on knowledge of the GDPR.

• Familiarity with global and local regulatory trends related to Artificial Intelligence, including the EU AI Act and Bill 2338/23 in Brazil.

• Proficient in English.

🏝️ Benefits

• Variable Compensation Package* (profit sharing, long-term incentive plan, or commission, based on role eligibility).

• Health and dental insurance with co-payments.

• Verde Virtual Hospital: 24/7 telemedicine services.

• Subsidy for prescription medications.

• Meal and/or food allowance – Pluxee*.

• Childcare assistance for children up to 5 years and 11 months old.

• Support for employees with children with disabilities.

• Life insurance coverage.

• Fuel or commuting allowance*.

• Home office allowance* for hybrid or remote work contracts.

• Welcome kit for new parents.

• SESC partnership*.

• Education Benefit: access to an internal self-development platform (Studa and Stone Library).

• Acolhe360º: complimentary emotional support.

• Quick Massage and on-site clinic services*.

• Optional benefits: Wellhub, TotalPass, Pet Club, Flash, Férias&Co, transportation voucher, Allya, and educational partnerships.