Especialista em Governança Estratégica de TI – Preferencialmente para Mulheres

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Map and assess IT risks comprehensively, conducting extensive risk assessments, creating risk management plans by process, and defining associated controls and action plans.

• Consolidate and prioritize the backlog of strategic IT risks, monitoring mitigation plans, residual risks, and key risk indicators (KRIs), highlighting deviations and improvement opportunities to leadership.

• Coordinate efforts with Risk Points of Contact and Risk Agents within IT superintendencies, integrating risk management with Compliance, Internal Audit, Internal Controls, and Corporate Risk areas, thus strengthening cross-governance.

• Support the establishment and operation of IT governance and risk committees and forums, ensuring proper documentation, tracking, traceability, and regular reporting to the Executive Board and other executive bodies.

• Define, review, and continuously evolve the IT governance model, enhancing institutional maturity and ensuring coherence, transparency, and strategic discipline across the Technology Division.

• Orchestrate integration between technology, business, and corporate areas, acting as a governance focal point within superintendencies and ensuring cross-alignment.

• Implement and monitor priority mitigation actions, overseeing execution with technical leads and ensuring ongoing improvement in risk maturity and organizational compliance.

• Foster a culture of governance, strategy, and IT risk management by leading engagement, training, and awareness initiatives within teams and partner areas.

• Track the evolution of strategic governance and IT performance indicators (KPIs, KRIs, OKRs), ensuring sustainable performance and supporting decisions with evidence and structured analyses.

• Conduct benchmarks, comparative studies, and maturity diagnostics, researching market references and best practices (COBIT, ITIL, ISO 31000, ISO/IEC 38500) to propose advancements and position IT competitively.

⛳️ Requirements

• Hold a completed Bachelor’s degree in Computer Science, Computer Engineering, Information Systems, Administration, or related fields.

• Have a completed specialization or MBA in areas related to IT Governance, Risk Management, Strategic Management, Information Security, or similar fields.

• Demonstrate a minimum of 7 years of professional experience in Information Technology or Management Consulting, preferably with a focus on governance, risk, or IT compliance.

• Master IT governance frameworks such as COBIT, ITIL, ISO/IEC 38500, and ISO/IEC 27001, applying them to structure and evolve institutional governance models.

• Exhibit solid knowledge in IT risk management, including identification, assessment, treatment, and monitoring of technological risks, based on frameworks like ISO 31000 and COSO.

• Be familiar with compliance processes, internal and external IT auditing, and regulatory requirements applicable to the financial sector (e.g., CMN Resolution 4,893/2021, LGPD).

• Communicate in English at an intermediate level (reading, writing, and conversing).

• Possess skills in influencing, articulating, and strategically positioning alongside leadership and multidisciplinary stakeholders.

• Hold certifications in IT governance or risk, such as COBIT Foundation, CRISC, CGEIT, ISO 27001 Lead Implementer/Auditor, or ISO 31000 Risk Manager.

• Have prior experience in the cooperative or banking financial sector (as an employee or third party), with knowledge of specific regulatory requirements from the Central Bank of Brazil.

• Utilize BI tools and data visualization (e.g., Power BI, Tableau) for creating executive dashboards and monitoring strategic indicators.

• Demonstrate experience in drafting risk management plans by process, conducting cross-functional risk assessments, and coordinating IT risk committees.

• Show experience in digital transformation projects and governance maturity assessments.

• Exhibit experience in developing internal regulations, IT policies, and management standards, ensuring compliance and institutional alignment.

• Have knowledge of agile practices and IT operational models, balancing governance with flexibility in execution.

🏝️ Benefits

• 14th and 15th fixed salaries

• Profit sharing (according to seniority)

• Health and Dental Insurance with no co-payments

• Wellness programs with Wellhub (formerly Gympass), Nutrition, Psychology, Occupational Therapy, Massage, Running Group, and local gym access

• Meal and Food Vouchers – with flexible percentages on VA/VR cards, without co-payments

• Extended maternity and paternity leave

• Childcare or nanny assistance for children up to 6 years and 11 months

• Assistance for children with disabilities, with no age limit

• Life insurance

• Private pension up to 8% of salary

• Training platform – Sicredi Aprende, offering various courses

• 40-hour work week – utilizing a time bank system

• Telework assistance (except for positions requiring 100% in-person attendance)