Cyber Risk Analyst – Hybrid (Porto/Lisbon)

PrimeIT; Porto; Hybrid; EUR 42,000 - 64,000; Full time

Job summary

PrimeIT is seeking a Risk Analyst within its Cybersecurity department. The role focuses on defining and promoting cybersecurity governance for ITG’s Payment Services and supporting understanding and management of cyber risks across related sectors.

The position is hybrid, based in Porto or Lisbon, and requires English proficiency. Key duties include risk supervision, root cause analysis, and delivering consolidated risk overviews to leadership, while coordinating remediation actions and inputs

Responsibilities

• Define and promote cybersecurity governance for ITG’s Payment Services (IT PS).
• Support IT PS in understanding, controlling, and managing their cyber risks.
• Oversee end-to-end cyber risk supervision across the three cross entity sectors: IT Cash Management, Customer Data Services, Electronic Payments, and Factoring.
• Identify and analyze risks while collaborating to permanent control activities on ICT and non-ICT risks.
• Determine root causes and potential adverse events,
• Plan and conduct operational risk inputs (RCSA results, historical incidents, control plans) to update the risk landscape,
• Follow remediations by overseeing implementation of corrective actions and verifying effectiveness.
• Report to the CISO/ITRO/ICRO Payment:
• Issue alerts, propose corrective actions, and deliver a consolidated risk overview.
• Provide inputs for RCSA, audits and other relevant reviews,
• Support 3rd party management analysis.

Job description

PrimeIT is seeking a Risk Analyst within its Cybersecurity department. The role focuses on defining and promoting cybersecurity governance for ITG’s Payment Services and supporting understanding and management of cyber risks across related sectors.

The position is hybrid, based in Porto or Lisbon, and requires English proficiency. Key duties include risk supervision, root cause analysis, and delivering consolidated risk overviews to leadership, while coordinating remediation actions and inputs