EcoVadis

• Building target architectures and long-term strategic roadmaps alongside Solutions, Engineering, Data and IT teams. • Become the owner of the Data Strategy on the architecture side, translating complex business needs into pragmatic, future-proof architectures. • Define and govern Enterprise Data Models and Domains, expanding beyond traditional analytics to AI/ML workloads. • Lead the architecture side of the Data Strategy, specifically designing for "AI-readiness" by integrating Feature Stores, Vector Databases and other technologies into our long-term roadmap. • Explore and validate new solutions in the data platform space based on business requirements or research. • Perform technical Proof of Concepts, document them, and assist teams in industrializing them. • Monitor new technological advances to assist teams in reducing technical debt and adopt the right tooling. • Collaborate with Data Governance and AI teams to continuously improve architecture governance practices. • Develop and maintain policies, standards, and guidelines to ensure a consistent framework is applied across the data platform. • Identify discrepancies between the technical architecture, agreed practices, and system designs proposed by project teams. • Ensure architectures adhere to data compliance frameworks (e.g., GDPR, CCPA) and ethical considerations in AI/ML model deployment. • Collaborate with Product Managers and Data Product Owners to enable Data as a Product, ensuring they are designed for reusability, scalability, and self-service consumption. • Define best practices for the development, maintenance, and lifecycle management of data products. • Act as a hands-on mentor to Data Engineering and Analytics teams, guiding them on day-to-day data modeling patterns, best practices, and execution choices. • Advise business and technical stakeholders on self-service data platform capabilities to maximize value. • Partner with IT team members to ensure architecture aligns with security strategy and policies. • Drive continuous improvement and help drive the adoption of new data tools and practices. • Apply a pragmatic approach to governance and application portfolio rationalization. • Be an active part of the D&A leadership team.

• The Enterprise Data Architect plays a critical role in sustaining the growth. • You will bridge business strategy and technology strategy, acting as the technical "North Star," to evolve our Data Platform into a high-performance data mesh ecosystem that treats data as a product and AI as a core competency. • You will bridge the gap between traditional data modeling and the emerging needs of Generative AI, AI Agent consumption, LLM orchestration, and real-time MLOps. • You will be the owner of the Data Strategy on the architecture side, supporting multiple teams including Analytics, BI, Data Engineering, Data Governance, Engineering and AI/ML teams to ensure our ecosystem remains scalable, resilient, and AI-enabled. • Building target architectures and long-term strategic roadmaps alongside Solutions, Engineering, Data and IT teams. • Define and govern Enterprise Data Models and Domains, expanding beyond traditional analytics to AI/ML workloads. • Lead the architecture side of the Data Strategy, specifically designing for "AI-readiness" by integrating Feature Stores, Vector Databases and other technologies into our long-term roadmap. • Collaborate with Data Governance and AI teams to continuously improve architecture governance practices.

Role Description We are searching for an individual or an organization based in Brazil with a social compliance background to work with our Client Services team on a freelance or consultancy basis (part-time) and help us effectively collaborate with and service a diverse portfolio of clients and their suppliers in Brazil. With a workers’ rights and supplier engagement background, and a keen interest and capacity for the use of technology, we are looking for a candidate that will engage with workers, suppliers and brands in Brazil to drive meaningful impact. Working with the Client Services team, they will be responsible for: - Introducing our digital worker engagement programs to suppliers (both virtually and on site when possible) - Getting management buy-in - Training management on the platform usage - Engaging with workers and promoting participation - Managing grievance cases - Liaising between all stakeholders to achieve positive outcomes for all The role will require flexibility and agility to take on various tasks and work remotely with a global team. The role will require some evening meetings to communicate with the team based in Canada and Europe. If the role sounds like a good fit for you, we’d love to hear from you. Qualifications - Social compliance or labour rights background with knowledge and experience in supply chains, corporate sourcing, ethical procurement, grievance mechanisms, social impact, sustainability, international development, social impact tech, and/or business and human rights - 5+ years’ experience working within the global supply chain industry, delivering social or labour impact projects - Excellent communication skills, both oral and written, in both English and Portuguese is required - Organized, conscientious and accountable - Experience in customer/client services and delivery - Based in Brazil is required - Occasional travel nationally may be required Requirements - Understanding of labour, human and community rights issues in global supply chains - Knowledge and experience in community relations, corporate social responsibility programs - Experience with adopting new technology and train others to do the same - Self-motivated with a tolerance for ambiguity and change, with high desire to take ownership of projects - Passion for equality and safe workplaces - Familiarity with the auditing industry and international certification standards (i.e. BSCI, ETI, SA8000), internal and external grievance mechanisms, industry associations, and sustainability entities (i.e. SEDEX) is a plus Benefits - Location: São Paulo, Brazil - Start date: 2026 - External contractor: If you are interested, please submit your resume, cover letter along with your proposed rates.

• Design, implement, and maintain security gates within CI/CD pipelines • Explore and deploy AI-powered security tools to enhance vulnerability detection and automate triage • Conduct regular internal penetration tests on web, mobile, and AI-based applications • Coordinate with external security firms for third-party audits and manage the end-to-end remediation process • Conduct security reviews and threat modeling specifically for AI-driven features • Lead threat modeling sessions with architects and developers to identify potential attack vectors • Perform regular security assessments, triage findings, and coordinate with engineering teams to prioritize remediation • Establish guidelines and best practices for the secure use of AI coding assistants • Conduct manual and automated deep-dive code reviews • Act as a security consultant for product teams, providing guidance on OWASP Top 10 and secure coding standards • Periodically monitor high-level availability and performance dashboards

• Develop and implement GRC Strategy: Create, author, develop and implement a comprehensive GRC strategy, which includes policies, procedures, and security requirements that aligns with industry best practices and regulatory requirements. • Deploy, maintain and continuously develop a proprietary control framework that is consistent with the organization’s compliance requirements and needs. • Support in conducting risk and control assessments, and identify, evaluate, and prioritize potential threats and vulnerabilities. • Author and conceptualize original risk mitigation plans and corrective actions to address risks effectively. • Collaborate with Product teams to ensure "Compliance-by-Design," providing requirements and highlighting security risks during the discovery phase of new features and improvements. • Ensure Regulatory and Industry Standards Compliance: Stay abreast of relevant laws, regulations, security frameworks and industry standards (e.g. GDPR, ISO 27001, NIS2, SOC 2,...), and work towards ensuring the organization’s compliance with them. • Promote awareness of applicable laws and regulations towards employees and upper management. • Conduct regular audits and assessments to monitor compliance and identify areas of improvement. • Be an active participant in third party audits, including leading them to support IT Security needs. • Support Business Processes: Perform deep-dive analysis and author technical responses for security questionnaires, translating complex internal security controls into customized client-facing documentation. • Review and provide expert analysis of security clauses in contracts, drafting customized security requirements for clients and suppliers. • Participate in clients meetings to address cybersecurity concerns and requirements, Conduct and document security reviews of SaaS applications, producing original risk assessment reports and designing mitigation recommendations. • Building and maintaining a Security Trust Center or similar customer-facing resources. • Provide Strategic Guidance: Become one of the main points of contact for senior management on GRC matters, and create strategic advisory materials/models detailing the impact of GRC initiatives on business decisions. • Develop and maintain strong relationships with key stakeholders across the organization. • Ensure Functional Supervision Provide expert guidance and alignment for the GRC team; act as the technical mentor and "quality gatekeeper" for key deliverables, including security awareness program and third-party risk assessments. • Deliver IT Security Reporting: Develop, support and maintain key performance indicators (KPI) for the Security function. Gather, analyze and report on security metrics and compliance status. Prepare and design customized presentations and reports to senior management on the status of the IT Security program, including key risks, threats, and vulnerabilities. • Implement AI-Powered GRC Operations: Lead the practical adoption of Generative AI tools (LLMs, AI Agents) to automate evidence collection, draft security policies, and summarize regulatory changes, significantly increasing team efficiency.

• Develop global pricing strategy, from analysis to launch: Develop and execute the pricing strategy to maximize both short-term and long-term objectives • Track market trends (customer buying patterns, changing market conditions, leading macroeconomic indicators, competitive pricing, inflation) to inform approaches • Work across internal teams to identify pricing needs and feedback • Analyze growth and profitability metrics, and identify opportunities to improve pricing at the solution-level, package-level, feature-level and geography-level • Work with Market Research to run market research to identify customer and prospect needs, gaps, pain points and perceptions in the area of pricing • Share pricing insights on an ongoing basis and as needed with internal teams like executive leadership, strategy, product management, frontline, RevOps, and across marketing • Test, launch, monitor and adjust pricing approaches: Manage internal project teams across RevOps, Strategy, Solutions Consulting, Tech teams, Marketing and Product teams to deliver, test and launch approaches • Provide recommendations on discount levels (across solutions, features, packages) • Build pricing documentation and objection-handling enablement for frontline teams • Contribute to business plans, helping to set and monitor targets, revenue and profitability • Analyze the ongoing impact of pricing changes (financial and other impact) • Since we’re a rapidly-growing business, you may contribute to other projects as needed

• Translate business and product strategy into enterprise-level architectural direction and roadmaps • Define and maintain the target architecture across business, application, data, and technology layers • Define and evolve the enterprise architecture metamodel and maintain the EA repository • Assess and document as-is architectures, identify gaps, overlaps, and structural risks, and drive simplification • Lead strategic architecture initiatives such as application rationalization and modernization • Manage strategic technology risks across the organization • Define and steward architecture principles, standards, and guardrails • Review and challenge major architectural decisions, ensuring alignment with long-term goals • Support executive decision-making with clear trade-offs and options, not just diagrams • Govern the adoption of new tools and platforms across the organization as well as decommissioning efforts • Continuously improve architecture governance practices to remain lightweight and effective • Act as a trusted advisor and liaison between business, product, engineering, data, and security stakeholders • Partner with Solution Architects and Tech Leads to align local designs with enterprise direction • Work with IT and Security teams to ensure architectures align with security strategies and policies • Participate in agile, cross-functional teams, providing architectural guidance for specific business domains • Collaborate on data architecture, analytics, and data governance models (e.g. data mesh, federated ownership) • Guide the responsible adoption of AI/ML and agent-based capabilities across the enterprise • Evaluate emerging technologies and trends with a business-value lens, avoiding hype-driven decisions • Contribute to the improvement of IT service management tools and processes • Continuously identify opportunities to improve the Enterprise Architecture practice

• Translate business and product strategy into enterprise-level architectural direction and roadmaps • Define and maintain the target architecture across business, application, data, and technology layers • Define and evolve the enterprise architecture metamodel and maintain the EA repository • Assess and document as-is architectures, identify gaps, overlaps, and structural risks, and drive simplification • Lead strategic architecture initiatives such as application rationalization and modernization • Manage strategic technology risks across the organization • Define and steward architecture principles, standards, and guardrails • Review and challenge major architectural decisions, ensuring alignment with long-term goals • Support executive decision-making with clear trade-offs and options, not just diagrams • Govern the adoption of new tools and platforms across the organization as well as decommissioning efforts • Continuously improve architecture governance practices to remain lightweight and effective • Act as a trusted advisor and liaison between business, product, engineering, data, and security stakeholders • Partner with Solution Architects and Tech Leads to align local designs with enterprise direction • Work with IT and Security teams to ensure architectures align with security strategies and policies • Participate in agile, cross-functional teams, providing architectural guidance for specific business domains • Collaborate on data architecture, analytics, and data governance models (e.g. data mesh, federated ownership) • Guide the responsible adoption of AI/ML and agent-based capabilities across the enterprise • Evaluate emerging technologies and trends with a business-value lens, avoiding hype-driven decisions • Contribute to the improvement of IT service management tools and processes • Continuously identify opportunities to improve the Enterprise Architecture practice

• Develop global pricing strategy, from analysis to launch: Develop and execute the pricing strategy to maximize both short-term and long-term objectives. Including: Track market trends (customer buying patterns, changing market conditions, leading macroeconomic indicators, competitive pricing, inflation) to inform approaches; Work across internal teams to identify pricing needs and feedback; Analyze growth and profitability metrics, and identify opportunities to improve pricing at the solution-level, package-level, feature-level and geography-level; Work with Market Research to run market research to identify customer and prospect needs, gaps, pain points and perceptions in the area of pricing; Share pricing insights on an ongoing basis and as needed with internal teams like executive leadership, strategy, product management, frontline, RevOps, and across marketing. • Test, launch, monitor and adjust pricing approaches: Manage internal project teams across RevOps, Strategy, Solutions Consulting, Tech teams, Marketing and Product teams to deliver, test and launch approaches; Provide recommendations on discount levels (across solutions, features, packages); Build pricing documentation and objection-handling enablement for frontline teams; Contribute to business plans, helping to set and monitor targets, revenue and profitability; Analyze the ongoing impact of pricing changes (financial and other impact).

• Communicate with business, analyze and suggest efficient solutions based on their requirements • Define and maintain architecture roadmap, technical solutions for new and existing functionality for each parts of the projects • Lead the design of API-first and contract-driven architectures, ensuring APIs are consistent, well-governed, reusable, and aligned with domain boundaries • Deliver architectural services, including guidance and conceptual design as well as technical and process innovations • Contribute to the definition and implementation of AI-enabled architectural patterns, such as agent orchestration, tool-based reasoning, workflow automation, and human-in-the-loop systems • Investigate latest technology and build quick Proof of Concept functionalities to address future business needs • Preparing, improving and introducing new approaches/methodologies/tools and techniques within department • Preparing, reviewing and validating software technical blueprints • Govern architecture decisions and tech implementation