Corporate Governance & Compliance Specialist – Brazil & Southern Cone

Responsible for supporting and executing the Compliance and Data Protection program, ensuring adherence to applicable laws and regulations (including the Brazilian LGPD), internal policies, and best practices. Works on preventing, identifying, and addressing regulatory and privacy risks; supporting audits and investigations; and promoting a culture of ethics and data protection across the organization. Internal control, data protection, LISO, specific local requirements, Compliance, corporate control for all legal entities (all divisions) in Brazil and Southern Cone

• Support the implementation, maintenance, and continuous improvement of the Compliance program and the Privacy/Data Protection program.
• Contribute to mapping and assessing compliance and privacy risks (risk assessments), proposing action plans and mitigating controls.
• Support LGPD governance activities: legal bases, data subject rights, retention and disposal, privacy incidents, and consent management where applicable.
• Assist in drafting, reviewing, and updating policies, procedures, and training (Code of Conduct, anti-corruption, whistleblowing channel, privacy, information classification, etc.).
• Conduct/support third-party due diligence (integrity and privacy), including vendor assessments and contractual clauses (DPA, confidentiality, and security).
• Support Business and IT/Security teams in assessing initiatives, products, and processes (privacy by design/by default), including DPIAs/LIAs where applicable.
• Handle data subject requests and support the operation of privacy processes (DSARs), maintaining records and timelines.
• Support reporting and incident response workflows, contributing to impact assessments and notification obligations.
• Monitor regulatory changes and guide internal compliance efforts, preparing communications and recommendations.
• Collect evidence and support internal/external audits, investigations, and remediation controls.
• Maintain program documentation and records (ROPA, inventories, control evidence, audit trails), as applicable.