IT Strategic Governance Specialist – Preferably Female

Role Overview

• Map and assess IT risks across the organization by conducting comprehensive risk assessments, developing risk plans by process, and defining associated controls and action plans.
• Consolidate and prioritize the backlog of strategic IT risks, monitor mitigation plans, residual risks and Key Risk Indicators (KRIs), and flag deviations and improvement opportunities to leadership.
• Coordinate activities with focal points and risk agents in IT divisions and integrate risk management with Compliance, Internal Audit, Internal Controls and Corporate Risk areas, strengthening cross-functional governance.
• Support the creation and operation of IT governance and risk committees and forums, ensuring recordkeeping, follow-up, traceability and periodic reporting to the Executive Board and executive bodies.
• Define, review and continuously evolve the IT governance model, raising institutional maturity and ensuring coherence, transparency and strategic discipline across the Technology Directorate.
• Orchestrate integration between technology, business and corporate areas, acting as the governance focal point for IT divisions and ensuring cross-functional alignment.
• Implement and monitor priority mitigation actions, following up on execution with technical owners and ensuring continuous improvement of the organization’s risk maturity and compliance.
• Promote a culture of governance, strategy and IT risk management, leading engagement, training and awareness initiatives with teams and partner areas.
• Track the evolution of strategic governance and IT performance indicators (KPIs, KRIs, OKRs), ensuring sustainable performance and supporting decisions with evidence and structured analysis.
• Conduct benchmarks, comparative studies and maturity diagnostics, researching market references and best practices (COBIT, ITIL, ISO 31000, ISO/IEC 38500) to propose improvements and position IT competitively.

Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, Information Systems, Business Administration or related fields.
• Specialization or MBA completed in areas related to IT Governance, Risk Management, Strategic Management, Information Security or related fields.
• Minimum of 7 years of professional experience in Information Technology or Management Consulting, preferably with experience in IT governance, risk or compliance.
• Proficiency with IT governance frameworks such as COBIT, ITIL, ISO/IEC 38500 and ISO/IEC 27001, applying them to structure and evolve institutional governance models.
• Solid knowledge of IT risk management, including identification, assessment, treatment and monitoring of technology risks, based on frameworks such as ISO 31000 and COSO.
• Familiarity with compliance processes, internal and external IT audits and regulatory requirements applicable to the financial sector (e.g., CMN Resolution 4.893/2021, LGPD).
• Intermediate English communication skills (reading, writing and speaking).
• Strong influencing, stakeholder engagement and strategic positioning skills with leadership and multidisciplinary stakeholders.

Benefits

• Fixed 14th and 15th salaries
• Profit-sharing (based on seniority)
• Health and dental plans with no co-pay
• Wellness programs via Wellhub (formerly Gympass): Nutrition, Psychology, Occupational Health, Massage, running group and local gym
• Meal and food vouchers with flexible percentage allocation between VA/VR cards, no co-pay
• Extended maternity and paternity leave
• Childcare or nanny assistance for children up to 6 years and 11 months
• Assistance for children with disabilities, no age limit
• Life insurance
• Private pension up to 8% of salary
• Training platform – Sicredi Aprende, with a variety of courses
• 40-hour workweek – using a time bank/flexible hours system
• Telework allowance (except for positions that are 100% on-site)