AI CYBERSECURITY GOVERNANCE MANAGER

Stellantis South America; Betim; On-site; BRL 240,000 - 360,000; Full time

Job summary

A Stellantis South America está buscando um(a) Gerente de Governança de Cyber para IA, com atuação em Betim. Será responsável por políticas, avaliação de riscos e conformidade em IA, com interface próxima ao CISO e equipes de ICT.

O papel demanda experiência em governança de cibersegurança, políticas e auditoria, com disponibilidade para trabalho presencial em Betim (MG) ou SP. Formação avançada e inglês são diferenciais importantes.

Qualifications

• Experiência prática em governança, risco ou conformidade de cibersegurança em ambientes ICT complexos.
• Conhecimento prático de frameworks de risco, controle, avaliação, auditoria e remediação.
• Compreensão do ciclo de vida da IA e dos riscos cibernéticos associados a dados, plataformas e integrações.
• Capacidade de desenvolver políticas, diretrizes, evidências de decisão e auditorias, bem como coordenar remediações.
• Formação superior completa (Bacharelado ou equivalente) em áreas correlatas ou experiência prática equivalente.
• Inglês avançado.
• Disponibilidade para trabalho presencial em Betim (MG) ou São Paulo/SP.

Responsibilities

• Estabelecer e manter a governança Cyber-for-AI, coordenando políticas e o modelo operacional em ICT.
• Gerenciar a metodologia de avaliação de riscos cibernéticos para IA e planos de tratamento.
• Manter cobertura de governança de usos de IA e avaliações no inventário da empresa.
• Incorporar pontos de entrada de risco e governança proporcionais ao delivery, operação e mudanças.
• Manter registros de exceções, ações corretivas e compromissos vencidos; acompanhar evidências.
• Garantir conformidade com controles cibernéticos acordados e requisitos de asseguração.
• Gerar métricas e relatórios para stakeholders de ICT e CISO sobre riscos de IA.
• Conduzir conformidade com regulamentos de IA e segurança cibernética e acionar ações de remediação com stakeholders.

Skills

Governança de Cibersegurança

Avaliação de Riscos Cibernéticos

Frameworks de Compliance

Ciclo de Vida da IA

Elaboração de Políticas

Auditoria e Remediação

Education

Bacharelado ou equivalente em Cybersecurity / Ciência da Computação / Gestão de Riscos

Tools

Ferramentas GRC

Job description

Sobre a Empresa

At Stellantis, we assess candidates based on qualifications, merit, and business needs. We welcome applications from people of all gender identities, age, ethnicity, nationality, religion, sexual orientation, and disability. Diverse teams will allow us to better meet the evolving needs of our customers and care for our future.

Horário: ADM

Contratação: Efetivo – CLT

Nível: Profissional

Descrição e Responsabilidades

Stellantis is one of the global leaders in the development and production of automobiles and light commercial vehicles, as well as in providing mobility solutions. We are one of the world’s leading Mobility Tech Companies, bringing together iconic brands such as Fiat, Jeep, Peugeot, Citroën, RAM, and Abarth. With operations in nearly 30 countries and presence in over 130 markets, we offer clean, connected, accessible, and safe mobility solutions.

What drives us is the talent and diversity of our people, who transform passion and experience into value for our customers, communities, and partners every day. We are looking for individuals who are passionate about automobiles, technology, and innovation to join our team!

The AI Cybersecurity Governance Manager will lead Cyber-for-AI governance across ICT, establishing practical policies, risk processes and oversight for AI solutions and their supporting data, platforms and integrations. The role will enable secure AI adoption through proportionate controls, clear accountability and evidence-based decisions, working closely with CISO, ICT delivery and operational teams, the AI Security Architect and wider AI governance stakeholders.

Main Activities

• Establish and maintain the Cyber-for-AI governance framework, policy coordination and operating model across ICT, defining responsibilities, decision forums and escalation routes aligned with enterprise governance;
• Own the cyber risk assessment methodology and prioritisation process for AI, identifying control gaps and coordinating proportionate treatment plans with accountable owners and the AI Security Architect;
• Maintain governance coverage of AI uses and assessments through the enterprise inventory, ensuring ownership, risk status and assessment records remain current;
• Embed intake, risk-tiering and proportionate governance checkpoints throughout delivery, operation, change and retirement, coordinating reviews, decision evidence and sign-offs;
• Maintain exception records, track remediation actions and overdue commitments, and escal ...
• Oversee adherence to agreed cyber controls and assurance requirements, coordinating evidence collection, assurance reviews and audit remediation;
• Provide management metrics and reporting to senior ICT and CISO stakeholders on AI cyber risks, assessment coverage, control effectiveness, exceptions and remediation progress;
• Drive compliance with applicable AI and cybersecurity regulations and coordinate supplier cyber assurance, governance requirements and remediation actions with relevant stakeholders.

Requisitos

We expect you to have:

• Practical expertise in cybersecurity governance, risk or compliance within complex ICT environments;
• Practical knowledge of cyber risk and control frameworks, assessment and assurance processes, and remediation prioritisation;
• Working understanding of the AI lifecycle and associated cyber risks across data, platforms and integrations;
• Expertise in developing policies and guidance, maintaining decision and assurance evidence, and coordinating audits, exceptions and remediation;
• Completed higher education (Bachelor’s degree or equivalent) in Cybersecurity, Computer Science, Risk Management or a related discipline, or equivalent practical experience;
• Advanced English;
• Availability for on-site work in Betim (MG) or São Paulo/SP;

It Will Be Considered a Plus If You Have

• Familiarity with NIST AI RMF, ISO/IEC 27001 and ISO/IEC 42001 and their practical application to AI cyber risk and governance;
• Experience with GRC tools, management reporting and governance adoption in enterprise or global organisations;
• Relevant professional certification, such as CISM, CRISC or CISSP.

Benefícios

Informado na entrevista