AI CYBERSECURITY GOVERNANCE MANAGER

Stellantis; Betim; On-site; BRL 350,000 - 520,000; Full time

Job summary

A Stellantis procura um Especialista em Governança de Cibersegurança para IA para liderar a governança de IA na ICT, definindo políticas, processos de risco e mecanismos de supervisão para soluções de IA e dados associados.

O papel envolve estabelecer controles proporcionais, prestar contas e apoiar decisões com evidências, trabalhando com o CISO, equipes de entrega e o arquiteto de IA, assegurando conformidade com normas e auditorias.

Qualifications

• Experiência prática em governança, risco ou compliance de cybersecurity em ambientes ICT complexos.
• Conhecimento prático de quadros de risco e controle, processos de avaliação/garantia e priorização de remediação.
• Compreensão do ciclo de vida de IA e dos riscos cibernéticos associados a dados, plataformas e integrações.
• Capacidade de desenvolver políticas e diretrizes, manter evidências de decisão/garantia e coordenar auditorias/remediação.
• Graduação (Bacharel) em Cybersecurity/Computação ou experiência prática equivalente.
• Inglês avançado.
• Disponibilidade para atuação on-site em Betim (MG) ou São Paulo/SP.

Responsibilities

• Estabelecer e manter a governança Cyber-for-AI em ICT, definindo responsabilidades e vias de escalonamento.
• Responsável pela metodologia de avaliação de risco cibernético para IA e priorização de planos de tratamento.
• Manter cobertura de governança de usos de IA e avaliações através do inventário corporativo.
• Incorporar intake, estratificação de risco e pontos de governança proporcionais ao longo da entrega/operational/alteração/retirada.
• Manter registros de exceções, acompanhar ações de remediação e riscos não resolvidos.
• Supervisionar aderência a controles cibernéticos acordados e coletar evidências para auditoria.
• Fornecer métricas de gestão e relatório para CISO e stakeholders sênior sobre riscos de IA e remediação.

Skills

Cybersecurity governance

Risk management

Compliance

AI risk understanding

Policy development

Audit coordination

Inglês avançado

Education

Bachelor’s degree in Cybersecurity/Computer Science or related field

Job description

Descrição:

Stellantis is one of the global leaders in the development and production of automobiles and light commercial vehicles, as well as in providing mobility solutions. We are one of the world’s leading Mobility Tech Companies, bringing together iconic brands such as Fiat, Jeep, Peugeot, Citroën, RAM, and Abarth. With operations in nearly 30 countries and presence in over 130 markets, we offer clean, connected, accessible, and safe mobility solutions.

What drives us is the talent and diversity of our people, who transform passion and experience into value for our customers, communities, and partners every day. We are looking for individuals who are passionate about automobiles, technology, and innovation to join our team!

The AI Cybersecurity Governance Manager will lead Cyber-for-AI governance across ICT, establishing practical policies, risk processes and oversight for AI solutions and their supporting data, platforms and integrations. The role will enable secure AI adoption through proportionate controls, clear accountability and evidence-based decisions, working closely with CISO, ICT delivery and operational teams, the AI Security Architect and wider AI governance stakeholders.

Main activities:

• Establish and maintain the Cyber-for-AI governance framework, policy coordination and operating model across ICT, defining responsibilities, decision forums and escalation routes aligned with enterprise governance;


• Own the cyber risk assessment methodology and prioritisation process for AI, identifying control gaps and coordinating proportionate treatment plans with accountable owners and the AI Security Architect;


• Maintain governance coverage of AI uses and assessments through the enterprise inventory, ensuring ownership, risk status and assessment records remain current;


• Embed intake, risk-tiering and proportionate governance checkpoints throughout delivery, operation, change and retirement, coordinating reviews, decision evidence and sign-offs;


• Maintain exception records, track remediation actions and overdue commitments, and elevate unresolved risks to the appropriate decision forum;


• Oversee adherence to agreed cyber controls and assurance requirements, coordinating evidence collection, assurance reviews and audit remediation;


• Provide management metrics and reporting to senior ICT and CISO stakeholders on AI cyber risks, assessment coverage, control effectiveness, exceptions and remediation progress;


• Drive compliance with applicable AI and cybersecurity regulations and coordinate supplier cyber assurance, governance requirements and remediation actions with relevant stakeholders.

Requisitos:

We expect you to have:

• Practical expertise in cybersecurity governance, risk or compliance within complex ICT environments;


• Practical knowledge of cyber risk and control frameworks, assessment and assurance processes, and remediation prioritisation;


• Working understanding of the AI lifecycle and associated cyber risks across data, platforms and integrations;


• Expertise in developing policies and guidance, maintaining decision and assurance evidence, and coordinating audits, exceptions and remediation;


• Completed higher education (Bachelor’s degree or equivalent) in Cybersecurity, Computer Science, Risk Management or a related discipline, or equivalent practical experience;


• Advanced English;


• Availability for on-site work in Betim (MG) or São Paulo/SP.

It will be considered a plus if you have:

• Familiarity with NIST AI RMF, ISO/IEC 27001 and ISO/IEC 42001 and their practical application to AI cyber risk and governance;


• Experience with GRC tools, management reporting and governance adoption in enterprise or global organisations;


• Relevant professional certification, such as CISM, CRISC or CISSP.