AI CYBERSECURITY GOVERNANCE MANAGER

Stellantis South America; São Paulo; On-site; BRL 180,000 - 300,000; Full time

Benefits offered by this job

Benefícios informados na entrevista

Job summary

A Stellantis está buscando um Gerente de Governança de Cybersegurança para IA, com atuação em Betim (MG) ou São Paulo (SP). O profissional liderará políticas, avaliações de riscos e controles, alinhado ao CISO e equipes ICT.

É necessária experiência em governança de IA, políticas de segurança, e disponibilidade para trabalho presencial. A posição é CLT com foco em conformidade e melhoria contínua de segurança cibernética.

Qualifications

• Experiência prática em governança, risco ou compliance de cibersegurança em ambientes ICT complexos.
• Conhecimento de quadros de risco, controles, avaliação, garantia e priorização de remediação.
• Entendimento do ciclo de vida da IA e dos riscos cibernéticos em dados, plataformas e integrações.
• Experiência em desenvolver políticas, manter evidências de decisão e auditoria.
• Formação superior em área relacionada e inglês avançado.
• Disponibilidade para trabalho presencial em Betim (MG) ou São Paulo/SP.

Responsibilities

• Liderar a governança Cyber-for-AI em ICT, definindo políticas, processos e responsabilidades.
• Definir metodologia de avaliação de risco para IA e planos de remediação.
• Manter inventário de usos de IA, status de risco e registros de avaliação.
• Acompanhar conformidade com controles de cyber e auditorias, com evidências e sign-offs.
• Gerar métricas de gestão de riscos para diretoria de ICT e CISO.

Skills

Governança de cibersegurança

Risco e controles

IA e ciclo de vida de IA

Políticas e evidências de auditoria

Inglês avançado

Disponibilidade para On-site

Education

Bacharel em Cibersegurança / Ciência da Computação / Gestão de Riscos ou equivalente

Job description

Sobre a Empresa

At Stellantis, we assess candidates based on qualifications, merit, and business needs. We welcome applications from people of all gender identities, age, ethnicity, nationality, religion, sexual orientation, and disability. Diverse teams will allow us to better meet the evolving needs of our customers and care for our future.

Sobre a Empresa

At Stellantis, we assess candidates based on qualifications, merit, and business needs. We welcome applications from people of all gender identities, age, ethnicity, nationality, religion, sexual orientation, and disability. Diverse teams will allow us to better meet the evolving needs of our customers and care for our future.

Horário:

ADM

Contratação:

Efetivo - CLT

Nível:

Profissional

Descrição e Responsabilidades

Stellantis is one of the global leaders in the development and production of automobiles and light commercial vehicles, as well as in providing mobility solutions. We are one of the world's leading Mobility Tech Companies, bringing together iconic brands such as Fiat, Jeep, Peugeot, Citroën, RAM, and Abarth. With operations in nearly 30 countries and presence in over 130 markets, we offer clean, connected, accessible, and safe mobility solutions.

What drives us is the talent and diversity of our people, who transform passion and experience into value for our customers, communities, and partners every day. We are looking for individuals who are passionate about automobiles, technology, and innovation to join our team!

The AI Cybersecurity Governance Manager will lead Cyber-for-AI governance across ICT, establishing practical policies, risk processes and oversight for AI solutions and their supporting data, platforms and integrations. The role will enable secure AI adoption through proportionate controls, clear accountability and evidence-based decisions, working closely with CISO, ICT delivery and operational teams, the AI Security Architect and wider AI governance stakeholders.

Main Activities

• Establish and maintain the Cyber-for-AI governance framework, policy coordination and operating model across ICT, defining responsibilities, decision forums and escalation routes aligned with enterprise governance;
• Own the cyber risk assessment methodology and prioritisation process for AI, identifying control gaps and coordinating proportionate treatment plans with accountable owners and the AI Security Architect;
• Maintain governance coverage of AI uses and assessments through the enterprise inventory, ensuring ownership, risk status and assessment records remain current;
• Embed intake, risk-tiering and proportionate governance checkpoints throughout delivery, operation, change and retirement, coordinating reviews, decision evidence and sign-offs;
• Maintain exception records, track remediation actions and overdue commitments, and elevate unresolved risks to the appropriate decision forum;
• Oversee adherence to agreed cyber controls and assurance requirements, coordinating evidence collection, assurance reviews and audit remediation;
• Provide management metrics and reporting to senior ICT and CISO stakeholders on AI cyber risks, assessment coverage, control effectiveness, exceptions and remediation progress;
• Drive compliance with applicable AI and cybersecurity regulations and coordinate supplier cyber assurance, governance requirements and remediation actions with relevant stakeholders;

Requisitos

We expect you to have:

• Practical expertise in cybersecurity governance, risk or compliance within complex ICT environments;
• Practical knowledge of cyber risk and control frameworks, assessment and assurance processes, and remediation prioritisation;
• Working understanding of the AI lifecycle and associated cyber risks across data, platforms and integrations;
• Expertise in developing policies and guidance, maintaining decision and assurance evidence, and coordinating audits, exceptions and remediation;
• Completed higher education (Bachelor's degree or equivalent) in Cybersecurity, Computer Science, Risk Management or a related discipline, or equivalent practical experience;
• Advanced English;
• Availability for on-site work in Betim (MG) or São Paulo/SP.

It Will Be Considered a Plus If You Have

• Familiarity with NIST AI RMF, ISO/IEC 27001 and ISO/IEC 42001 and their practical application to AI cyber risk and governance;
• Experience with GRC tools, management reporting and governance adoption in enterprise or global organisations;
• Relevant professional certification, such as CISM, CRISC or CISSP.

Benefícios:

Informado na entrevista