Compliance Analyst

PrimeIT; Portugal; Híbrido; EUR 13 000 - 17 000; Tempo integral

Resumo da oferta

PrimeIT is seeking a Governance, Risk and Compliance Analyst to translate legal, regulatory and contractual requirements into concrete information security controls. You will identify risks, monitor controls, prepare audit responses, and draft internal policies, reports and indicators.

This role supports an expanding, globally distributed team in Lisbon, working in a hybrid setup and contributing to national projects.

Qualificações

• Experience in translating legal, regulatory and contractual requirements into information security controls.
• Knowledge of GDPR, NIS Directive, PCI-DSS and ISO 27001 is preferred.
• Ability to create and monitor information security controls and indicators.
• Experience supporting audits and drafting policies and procedures.

Responsabilidades

• Analyze and implement legal, regulatory and contractual requirements for information security.
• Create, maintain and monitor information security controls.
• Identify risks and propose mitigation measures within relevant standards.
• Lead or support projects such as Disaster Recovery and Business Continuity.
• Prepare information and responses for audits and implement mitigations.
• Draft and review internal information security policies.
• Create reports, presentations and governance indicators.
• Improve and execute support processes for governance, risk and compliance.

Conhecimentos

Information security

Regulatory compliance

Risk assessment

Audit support

Descrição da oferta de emprego

Imagine working for a company where your growth is monitored every day, even from a distance. Where you are not just another number, but part of a constantly expanding team.

We are more than 2,360 Primers spread across the world, and we want one more: YOU.

We are looking for a Governance, Risk and Compliance Analyst with experience in:

• Analysis and implementation of legal, regulatory and contractual requirements for Information Security (e.g. NIS Directive, GDPR, PCI-DSS);
• Creation, maintenance and monitoring of controls;
• Identification of risks and proposal of mitigation measures, within the scope of relevant standards (e.g. ISO 27001, PCI DSS);
• Implementation of projects and initiatives (e.g. Disaster Recovery and Business Continuity Plan);
• Preparation of information and responses for audits and implementation of mitigation measures;
• Drafting and reviewing internal policies for the area;
• Creation of reports, presentations and indicators;
• Improvement and execution of support processes for the area;

Location: Lisbon | Hybrid

Project Type: National

Level of Experience: Mid (1 to 5 years)

• Salary Package: €1,200 to €1,500 (Net Value)