Brazil
Keyrus Brazil
Stone - Linkedin
IT Specialist | Internal Controls and Technology Risks | (Hybrid/SP)
Brazil
São Paulo, São Paulo, Brazil
SQLAWS
Automatic translation. Check the original.
About Stone
We are much more than a card machine company! Stone is a financial technology and services company focused on the customer.
We were born with the purpose of being protagonists in the transformation of the payment industry, serving Brazilian entrepreneurs and turning their dreams into results.
We are the largest independent payment methods company in Brazil, with over fifteen thousand people spread across the five regions of the country, in a scenario full of challenges and opportunities. We value teamwork, flexibility, continuous development, and disruptive thinking in the relentless pursuit of solutions for our REASON.
Our Culture
Here, we live our culture daily, guided by these 5 values:
- 💚 The customer is the reason
The customer is the reason we exist, and we only succeed if they succeed.
- ⚡ Owner's mindset
We do what's right, the right way, with responsibility and technology to make better decisions.
- 🎯 Straight to the point
Depth to understand and simplicity to solve.
- 🤝 Excellence is a team game
We build a long-term business, as a team and with collaboration.
- ✨ Passion in every detail
We do it with passion, attention to detail, and a desire to surprise to help the customer win.
What it's like to be an IT Specialist | Internal Controls and Technology Risks
We are looking for an IT Specialist to lead the technology front of the SOX program, general IT controls (ITGC), and automated process controls (ITAC), and to act as a technical reference in technology risks within the Internal Controls / Risks area.
Position mission: to ensure that ITGCs, automated controls, system-generated reports (IPE), and interfaces are designed, tested, and maintained effectively, gaining the trust (reliance) of external audit and ensuring adherence to Bacen regulations, LGPD, and other applicable regulations.
You will be the technical reference for the IT front within the SOX program, acting with autonomy to make day-to-day decisions without constant leadership approval. You will lead analysts and consultancies, be the focal point with external and internal audits, and translate complex technological risks into clear language for the CTO, CRO, and the Audit Committee. You will also act as an internal consultant for business and technology areas, guiding control design and resolving unprecedented problems, always with a data-driven culture and a focus on automation.
Your main responsibilities will be
- Define the IT scope of the SOX program: relevant systems, databases, infrastructure layers, and providers.
- Plan and manage the implementation and maintenance schedule, including interim and roll-forward testing.
- Coordinate analysts and consultancies, rigorously reviewing work papers.
- Act as the technical focal point with external and internal audits.
- Accesses: user lifecycle, privileged access management (PAM), service accounts, and periodic reviews.
- Changes: approvals, segregation between development and production, CI/CD pipelines, and emergency changes.
- Be responsible for the design and testing of automated controls, with baselines and benchmarking supported by ITGCs.
- Conduct design tests (TOD) and operational effectiveness tests (TOE).
- Define and monitor remediation plans with IT and business areas, with a sense of urgency.
- Align SOX controls with CMN and Bacen regulations applicable to S3 (internal controls, risk management, cybersecurity, and cloud).
- Evaluate critical providers and SOC 1 / SOC 2 reports, ensuring the controls that fall under the institution's responsibility (CUECs).
- Integrate the front with operational risk, information security, and LGPD.
- Prepare periodic reports and executive materials, communicating risks in clear language to leadership.
What we expect from you
- Degree in Information Systems, Computer Science, or a related field;
- Experience in IT audit, technology risks, or IT internal controls, with complete SOX cycles leading the front;
- Experience in a financial institution regulated by Bacen;
- Knowledge of COSO 2013, COBIT 2019, PCAOB AS 2201, and ISO 31.000;
- Knowledge of data analysis tools (Excel, SQL, and similar);
- Advanced English.
What increases your chances
- Postgraduate degree in IT Governance, Information Security, Systems Audit, or Risk Management;
- CISA, CRISC, CISM, CISSP certifications, or cloud certifications (AWS/Azure);
- Experience in a Big Four firm;
- Experience with Bacen supervision cycles;
- Knowledge of NIST CSF, ISO 27001, ISO 27005, and ITIL;
- Experience with AWS or Azure environments (IAM, logging, cloud changes); Power BI, Tableau, or Alteryx;
- Knowledge of GRC platforms (ServiceNow IRM, AuditBoard, SAP GRC, Archer), analytics, and test automation (RPA);
- Spanish.
Work Schedule
CLT: 8 hours daily + 1h break | Schedule: 5x2 Monday to Friday
Work Model/Location
Hybrid - SP
*In addition to affirmative action vacancies, all Stone vacancies are also open to people with disabilities.
Our Compensation and Benefits Package
(items with an asterisk have specific eligibility rules, which will be explained by recruiters throughout the selection process)
- 💸Fixed Salary
- 💰 Variable Compensation Package* (PLR, ILP, or Commission - provided according to job eligibility, not a free choice model)
- 🏥 Health and Dental Plan with co-payment (except for people with disabilities who do not have co-payment)
- 🩺Green Virtual Hospital: telemedicine team available 24 hours a day, 7 days a week
- 💊Medication subsidy
- 🍽️ Meal Voucher and/or Food Voucher - Pluxee* (except for Commercial Executive positions - 6hrs)
- 👶 Daycare Assistance (for children up to 5 years and 11 months old)
- 💙 Assistance for Child with Disability
- 🛡️ Life Insurance
- ⛽Fuel assistance or transportation assistance*
- 🏠 Home office assistance* (only for Hybrid or Remote contracts)
- 🎁 Welcome Kit for new parents
- 🏢 SESC Partnership*
- 📚 Education Benefit - Internal self-development platform (Studa and Stone Library)
- 🧠 Acolhe360 - Emotional support (free)
- 💆 Quick Massage and Clinic*
Optional:
Wellhub - TotalPass - Pet Club - Flash - Férias&Co - VT - Allya - Educational Partnerships
More opportunities with one profile
Want to be considered for more roles without repeating the whole process? Create your profile and be found by companies using Nort.
Create my profile