Cyber Security

act digital; Lisboa; Presencial; EUR 45 000 - 70 000; Tempo integral

Resumo da oferta

A prominent IT services firm in Lisbon is seeking a Mid-Senior Level Cybersecurity Specialist. The role involves creating and implementing cybersecurity policies, assessing security risks, and collaborating with IT teams to align with organizational objectives. Candidates should have strong experience in cybersecurity governance, risk compliance, and familiarity with standards like ISO 27001. This full-time position is critical for enhancing the firm's security posture, especially regarding AI and data governance.

Qualificações

• Experience in cybersecurity governance and risk compliance.
• Knowledge of ISO 27001, NIST, and CIS frameworks.
• Strong analytical and organizational skills.

Responsabilidades

• Create and implement cybersecurity policies and strategies.
• Analyze and assess security risks of technologies and tools.
• Collaborate with teams to ensure alignment.
• Develop security indicators and reports for management.
• Support risk assessments for AI and IT solutions.

Conhecimentos

Cybersecurity governance

Risk assessments

Communication skills

Analytical skills

Descrição da oferta de emprego

Responsibilities

• Contribute to the creation and implementation of cybersecurity policies and strategies.
• Analyze and assess security risks of technologies, security tools, and services, and make recommendations for improvements.
• Collaborate with Cybersecurity and IT teams to ensure alignment with the organization's security objectives.
• Develop security indicators, dashboards, and reports for executive management.
• Supervise internal security control testing and validation.
• Support the CISO in driving the AI & Data Cyber Governance.
• Assist in risk assessments for solutions offered by the AI & IT Innovation department.
• Ensure that security policies and actions align with the broader organization’s objectives.
• Maintain a comprehensive inventory of applications and associated security documentation, including Risk Assessments and Pentests.
• Track and manage the implementation of risk remediation plans and support the setup of risk committees.
• Review and manage access requests (Iwave, MyAccess, Mobisubscribe, etc.).

Requirements

• Experience in cybersecurity governance, risk, and compliance (GRC).
• Knowledge of frameworks and standards (ISO 27001, NIST, CIS).
• Skills in risk assessments, security controls, and remediation planning.
• Familiarity with AI & Data security governance.
• Ability to create dashboards, KPIs, and executive reports.
• Strong analytical, organizational, and communication skills.
• Fluency in English.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Other

Industries

IT Services and IT Consulting