Cyber Program Analyst

Decskill; Lisboa; On-site; EUR 45,000 - 68,000; Full time

Job summary

Decskill is seeking a Cyber Program Analyst to drive cybersecurity maturity evaluations across multiple entities within our international organization. You will translate complex security requirements into practical actions and evidence, liaise with IT providers and stakeholders, and report to cybersecurity governance teams.

This role offers exposure to a major transformation program with national and international scope, opportunities to grow technically, and a culture that values curiosity and

Qualifications

• Experience in Cybersecurity, IT Risk, Security Governance, Cybersecurity Compliance and/or Risk Management.
• Good general knowledge of IT and IT security, including key IT security processes and regulatory frameworks.
• Knowledge of Cybersecurity Risk and Risk Awareness.
• Knowledge of IT Continuity and Backup Management, including DORA requirements, is a plus.
• Knowledge of Cryptography, including key management, certificate management and CKMS, is a plus.
• Knowledge of Network Security, including network hardening and micro-segmentation, is a plus.
• Knowledge of a recognised cybersecurity framework such as NIST or equivalent.
• Experience with cybersecurity assessments, maturity evaluations, compliance or control frameworks is valued.
• Ability to understand cybersecurity requirements and translate them into practical actions and evidence.
• Strong analytical and problem-solving skills.
• Ability to analyse, synthesise and simplify complex information.
• Strong attention to detail and a rigorous approach.
• Good communication and stakeholder management skills.
• Ability to collaborate effectively with multiple teams and stakeholders.
• Ability to build and maintain professional networks.
• Comfortable facilitating meetings and working with different stakeholders. Adaptable and comfortable working in a dynamic, international environment.
• Fluent English is mandatory.
• French is a plus.

Responsibilities

• Deploy the cybersecurity maturity evaluation process across entities within the assigned perimeter.
• Support entities in understanding cybersecurity requirements and identifying the evidence needed to demonstrate compliance.
• Review and evaluate evidence submissions, ensuring consistency and alignment across assessments.
• Assess cybersecurity maturity and compliance against established security and IT risk frameworks.
• Communicate and inform entities about changes to cybersecurity requirements and frameworks impacting them.
• Facilitate collaboration between IT providers and internal entities to ensure effective implementation of cybersecurity requirements.
• Document assessment results and prepare reporting for cybersecurity governance and management.
• Contribute to the monitoring and improvement of cybersecurity maturity across multiple entities.
• Develop and contribute to internal projects aimed at improving the cybersecurity evaluation and assessment process.
• Collaborate with cybersecurity experts and stakeholders across different security domains.
• Support the implementation of cybersecurity and IT risk requirements in an international and multi-entity environment.
• Contribute to continuous improvement initiatives across the Cybersecurity Program.

Skills

Cybersecurity

IT Risk

Security Governance

Cybersecurity Compliance

Risk Management

NIST or equivalent

Network Security

Fluent English

French (plus)

Job description

We are growing. And we are looking for talented people.

At Decskill, we believe that technological excellence is driven by human talent.

We are an IT consulting company with more than 10 years of consolidated experience in the market, focused on building long-term relationships with both our clients and our people. Today, we are a community of over 800 professionals, working from Lisbon, Porto, and Madrid, contributing to impactful technology initiatives.

As part of the Astek Group, we combine a strong local culture with a global presence, being active in around 23 countries across 4 continents. This allows us to offer an international context, diverse challenges, and long-term career opportunities, while staying close to our teams.

We are looking for a Cyber Program Analyst!

Responsibilities:

• Deploy the cybersecurity maturity evaluation process across entities within the assigned perimeter.
• Support entities in understanding cybersecurity requirements and identifying the evidence needed to demonstrate compliance.
• Review and evaluate evidence submissions, ensuring consistency and alignment across assessments.
• Assess cybersecurity maturity and compliance against established security and IT risk frameworks.
• Communicate and inform entities about changes to cybersecurity requirements and frameworks impacting them.
• Facilitate collaboration between IT providers and internal entities to ensure effective implementation of cybersecurity requirements.
• Document assessment results and prepare reporting for cybersecurity governance and management.
• Contribute to the monitoring and improvement of cybersecurity maturity across multiple entities.
• Develop and contribute to internal projects aimed at improving the cybersecurity evaluation and assessment process.
• Collaborate with cybersecurity experts and stakeholders across different security domains.
• Support the implementation of cybersecurity and IT risk requirements in an international and multi-entity environment.
• Contribute to continuous improvement initiatives across the Cybersecurity Program.

Requirements:

• Experience in Cybersecurity, IT Risk, Security Governance, Cybersecurity Compliance and/or Risk Management.
• Good general knowledge of IT and IT security, including key IT security processes and regulatory frameworks.
• Knowledge of Cybersecurity Risk and Risk Awareness.
• Knowledge of IT Continuity and Backup Management, including DORA requirements, is a plus.
• Knowledge of Cryptography, including key management, certificate management and CKMS, is a plus.
• Knowledge of Network Security, including network hardening and micro-segmentation, is a plus.
• Knowledge of a recognised cybersecurity framework such as NIST or equivalent.
• Experience with cybersecurity assessments, maturity evaluations, compliance or control frameworks is valued.
• Ability to understand cybersecurity requirements and translate them into practical actions and evidence.
• Strong analytical and problem-solving skills.
• Ability to analyse, synthesise and simplify complex information.
• Strong attention to detail and a rigorous approach.
• Good communication and stakeholder management skills.
• Ability to collaborate effectively with multiple teams and stakeholders.
• Ability to build and maintain professional networks.
• Comfortable facilitating meetings and working with different stakeholders.Adaptable and comfortable working in a dynamic, international environment.
• Fluent English is mandatory.
• French is a plus.

By joining the team, you will be part of a major cybersecurity transformation program with high visibility and transversal exposure. You will interact with multiple entities and cybersecurity experts across different security fields, while developing your knowledge in cybersecurity and IT risk.

This role can also provide a strong foundation for future career paths such as CISO, Cybersecurity Program Manager or Cybersecurity Specialist.

Are you looking for an environment that values curiosity and commitment? Here, your contribution has real impact and individual growth is taken seriously.

Find with us the right opportunity to grow!

What you can expect from us:

• Long-term projects with national and international context.
• Opportunities to grow technically and professionally.
• A people-first culture, focused on transparency and trust.
• Teams that value ownership, collaboration and stability.

Decskill is committed to equality and non-discrimination with all our talents. We recruit and promote talent, based on diversity and inclusion, regardless of age, gender, ethnicity, race, nationality or any other form of discrimination incompatible with the dignity of the human being.