Privacy and Digital ECA Governance Lawyer

Responsibilities

• Manage, update, and monitor KPIs, KRs, and KRIs focusing on incidents, vulnerability remediation, and third-party compliance
• Act as a technical review point for other analysts to identify impediments and escalate to coordination
• Create high-impact executive presentations regarding security posture and strategic objectives
• Support AI governance by applying frameworks like ISO 42001 and NIST AI RMF
• Ensure process adherence to LGPD and Digital ECA, supporting Privacy by Design in new products
• Develop dashboards in Looker, Power BI, or Grafana to translate risks into actionable data
• Conduct 360° risk analyses connecting technical failures to business impacts

Requirements

• Senior experience in GRC with a focus on Information Security
• Mastery of frameworks such as NIST CSF, CIS Controls, and ISO 27001/27002/27005/29134
• Advanced practical experience with Looker, Power BI, or Grafana
• Solid knowledge of LGPD, Digital ECA, and AI Governance
• Experience defining and monitoring KRs and KRIs in Information Security structures
• Exceptional ability to synthesize information for executive leadership forums
• Understanding of Security by Design, vulnerability management, and incident response

Benefits

• Meal and/or food allowance
• Health and dental insurance
• Transportation vouchers
• Extended maternity and paternity leave
• Childcare assistance
• Wellhub and Zenklub partnerships
• Education incentives and MBA/Post-grad partnerships
• Airfare discounts
• Pet health insurance partnership
• Access to Arco educational materials for employees' children

About the Company

Arco is an organization made of people who transform education, committed to diversity and inclusion.