AI CYBERSECURITY GOVERNANCE MANAGER

Stellantis is one of the global leaders in the development and production of automobiles and light commercial vehicles, as well as in providing mobility solutions. We are one of the world’s leading Mobility Tech Companies, bringing together iconic brands such as Fiat, Jeep, Peugeot, Citroën, RAM, and Abarth. With operations in nearly 30 countries and presence in over 130 markets, we offer clean, connected, accessible, and safe mobility solutions.

What drives us is the talent and diversity of our people, who transform passion and experience into value for our customers, communities, and partners every day. We are looking for individuals who are passionate about automobiles, technology, and innovation to join our team!

The AI Cybersecurity Governance Manager will lead Cyber-for-AI governance across ICT, establishing practical policies, risk processes and oversight for AI solutions and their supporting data, platforms and integrations. The role will enable secure AI adoption through proportionate controls, clear accountability and evidence-based decisions, working closely with CISO, ICT delivery and operational teams, the AI Security Architect and wider AI governance stakeholders.

Main activities:

• Establish and maintain the Cyber-for-AI governance framework, policy coordination and operating model across ICT, defining responsibilities, decision forums and escalation routes aligned with enterprise governance;

 • Own the cyber risk assessment methodology and prioritisation process for AI, identifying control gaps and coordinating proportionate treatment plans with accountable owners and the AI Security Architect;

 • Maintain governance coverage of AI uses and assessments through the enterprise inventory, ensuring ownership, risk status and assessment records remain current;

 • Embed intake, risk-tiering and proportionate governance checkpoints throughout delivery, operation, change and retirement, coordinating reviews, decision evidence and sign-offs;

 • Maintain exception records, track remediation actions and overdue commitments, and escalate unresolved risks to the appropriate decision forum;

 • Oversee adherence to agreed cyber controls and assurance requirements, coordinating evidence collection, assurance reviews and audit remediation;

 • Provide management metrics and reporting to senior ICT and CISO stakeholders on AI cyber risks, assessment coverage, control effectiveness, exceptions and remediation progress;

 • Drive compliance with applicable AI and cybersecurity regulations and coordinate supplier cyber assurance, governance requirements and remediation actions with relevant stakeholders.

We expect you to have:

 • Practical expertise in cybersecurity governance, risk or compliance within complex ICT environments;

 • Practical knowledge of cyber risk and control frameworks, assessment and assurance processes, and remediation prioritisation;

 • Working understanding of the AI lifecycle and associated cyber risks across data, platforms and integrations;

 • Expertise in developing policies and guidance, maintaining decision and assurance evidence, and coordinating audits, exceptions and remediation;

 • Completed higher education (Bachelor’s degree or equivalent) in Cybersecurity, Computer Science, Risk Management or a related discipline, or equivalent practical experience;

• Advanced English;

• Availability for on-site work in Betim (MG) or São Paulo/SP.

It will be considered a plus if you have:

 • Familiarity with NIST AI RMF, ISO/IEC 27001 and ISO/IEC 42001 and their practical application to AI cyber risk and governance;

 • Experience with GRC tools, management reporting and governance adoption in enterprise or global organisations;

 • Relevant professional certification, such as CISM, CRISC or CISSP.