Implement a third-party IT risk management framework. Requires IT risk or information security experience and fluency in Portuguese.