InfoSec Cyber Advisor - AI Specialist

BRP; Campinas; Híbrido; BRL 300 000 - 520 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work mode

Diversity & inclusion culture

Resumo da oferta

BRP is seeking a senior InfoSec GRC advisory professional to lead governance, risk assessment, and strategic security recommendations across key projects in a hybrid Campinas-based role.

The ideal candidate will have 8+ years in GRC with expertise in ISO 27001, NIST, CIS, GDPR, SOC 2, and SOx, and will collaborate with EA, IT Security, and OT Security teams to design security into initiatives.

Qualificações

• Over 8–10 years in cybersecurity governance, risk management and compliance (GRC).
• Strong experience with ISO 27001, NIST, CIS, GDPR, SOC 2 and SOx.
• Ability to collaborate with Enterprise Architecture, IT Security, and OT Security teams to align security with business needs.
• Certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer are preferred.

Responsabilidades

• Governance & compliance: integrate security governance, policies, and regulatory requirements into projects.
• Risk identification & mitigation: assess project environments for cyber risks and provide remediation strategies.
• Security advisory: act as SME on security best practices and frameworks (ISO 27001, NIST, CIS).
• Solution-oriented: collaborate with EA and Project Management to develop practical security solutions.
• Security by design: embed security early in project lifecycles aligned with security architecture.
• Stakeholder engagement: work with cross-functional teams to raise security awareness and informed decisions.

Conhecimentos

GRC governance

Regulatory compliance

Security frameworks

GDPR & SOX knowledge

Enterprise architecture alignment

Cloud security

Security by design

Stakeholder engagement

Bilingual: French & English

Formação académica

CISSP / CISM / CRISC / ISO 27001 Lead Implementer

Ferramentas

SAP

Salesforce

Descrição da oferta de emprego

We are seeking a highly skilled InfoSec GRC Cyber Advisory professional to join our team and play a pivotal role in supporting governance, identifying cybersecurity risks, and providing strategic recommendations within key projects. This role requires a proactive and analytical mindset, strong problem-solving skills, and the ability to collaborate with enterprise architecture and project management teams to drive security excellence across the organization.

• All CVs must be submitted in English.

You’ll Have The Opportunity

• Governance & Compliance: Ensure that security governance frameworks, policies, and regulatory requirements are effectively integrated into key projects.
• Risk Identification & Mitigation: Assess project environments for cyber risks, vulnerabilities, and potential threats, providing clear risk assessments and mitigation strategies.
• Security Advisory: Act as a subject matter expert (SME), advising project teams on security best practices, frameworks (ISO 27001, NIST, CIS, etc.), and compliance requirements.
• Solution-Oriented Approach: Collaborate with Enterprise Architecture and Project Management to develop practical and effective security solutions tailored to project needs.
• Security by Design: Ensure security is embedded early in project lifecycles, aligning with corporate security architecture and business objectives.
• Stakeholder Engagement: Work closely with cross-functional teams, business units, to enhance security awareness and risk-informed decision-making.

YOU’LL THRIVE IN THIS ROLE IF YOU HAVE THE FOLLOWING SKILLS AND QUALITIES:

• Candidates should preferably have more than 10 years' experience
• 8+ years of experience in cybersecurity governance, risk management, and compliance (GRC).
• Strong expertise in security frameworks and regulations (ISO 27001, NIST, CIS, GDPR, SOC 2, SOx, etc.).
• Experience collaborating with Enterprise Architecture, IT Security, and OT Security teams to align security with business and operational needs.
• Deep understanding of enterprise security architecture, cloud security, and emerging cyber threats.
• Experience working with enterprise risk management, compliance teams, and internal audit functions.
• Professional certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer are preferred.

Additional requests

• Candidates must be bilingual, able to work fluently in French and English.
• SAP and Salesforce knowledge will be considered an asset

ACKNOWLEDGING THE POWER OF DIVERSITY

BRP is dedicated to nurturing a culture that invites, connects, and propels the ambitions of people of all backgrounds, profiles, beliefs and experiences. Ultimately, the diversity and uniqueness of our people fuel our ingenuity and set the course for the path ahead!

For this reason, we value diversity and we strive to always push each other forward to build an inclusive workplace where every employee feels like they belong, where they can grow and find meaning.

WELCOME TO BRP

We’re a world leader in recreational vehicles and boats, creating innovative ways to move on snow, water, asphalt, dirt and even in the air. Headquartered in the Canadian town of Valcourt, Quebec, our company is rooted in a spirit of ingenuity and intense customer focus. Today, we operate manufacturing facilities in Canada, the United States, Mexico, Finland, Australia and Austria, with a workforce made up of close to 20,000 spirited people, all

driven by the deeply held belief that at work, as with life itself, it’s not about the destination; It’s about the journey.

This position is based in Campinas, Brazil.

You will have the opportunity to work in hybrid mode.