AI CYBERSECURITY GOVERNANCE MANAGER

Stellantis is one of the global leaders in the development and production of automobiles and light commercial vehicles, as well as in providing mobility solutions. We are one of the world’s leading Mobility Tech Companies, bringing together iconic brands such as Fiat, Jeep, Peugeot, Citroën, RAM, and Abarth. With operations in nearly 30 countries and presence in over 130 markets, we offer clean, connected, accessible, and safe mobility solutions.

What drives us is the talent and diversity of our people, who transform passion and experience into value for our customers, communities, and partners every day. We are looking for individuals who are passionate about automobiles, technology, and innovation to join our team!

The AI Cybersecurity Governance Manager will lead Cyber-for-AI governance across ICT, establishing practical policies, risk processes and oversight for AI solutions and their supporting data, platforms and integrations. The role will enable secure AI adoption through proportionate controls, clear accountability and evidence-based decisions, working closely with CISO, ICT delivery and operational teams, the AI Security Architect and wider AI governance stakeholders.

Main activities:

• Establish and maintain the Cyber-for-AI governance framework, policy coordination and operating model across ICT, defining responsibilities, decision forums and escalation routes aligned with enterprise governance;

 • Own the cyber risk assessment methodology and prioritisation process for AI, identifying control gaps and coordinating proportionate treatment plans with accountable owners and the AI Security Architect;

 • Maintain governance coverage of AI uses and assessments through the enterprise inventory, ensuring ownership, risk status and assessment records remain current;

 • Embed intake, risk-tiering and proportionate governance checkpoints throughout delivery, operation, change and retirement, coordinating reviews, decision evidence and sign-offs;

 • Maintain exception records, track remediation actions and overdue commitments, and escalate unresolved risks to the appropriate decision forum;

 • Oversee adherence to agreed cyber controls and assurance requirements, coordinating evidence collection, assurance reviews and audit remediation;

 • Provide management metrics and reporting to senior ICT and CISO stakeholders on AI cyber risks, assessment coverage, control effectiveness, exceptions and remediation progress;

 • Drive compliance with applicable AI and cybersecurity regulations and coordinate supplier cyber assurance, governance requirements and remediation actions with relevant stakeholders.