Cyber Security Program Analyst

act digital; Porto; Híbrido; EUR 35 000 - 52 000; Tempo integral

Resumo da oferta

act digital is seeking a Cyber Security Program Analyst to join an international cybersecurity team focused on assessing and improving cyber resilience, security maturity, and IT risk management across multiple global entities. The role offers a hybrid work arrangement in Porto with 2–3 days on-site.

The successful candidate will conduct maturity assessments, support stakeholders, and produce governance deliverables while collaborating with diverse teams across several countries to drive a

Qualificações

• Experience in Cyber Security, IT risk, or governance.
• Understanding of NIST or equivalent standards.
• Knowledge of regulatory requirements.
• Familiarity with governance and compliance activities.
• Ability to engage with multiple stakeholders in an international environment.

Responsabilidades

• Conduct cybersecurity maturity assessments across entities.
• Support stakeholders in cybersecurity requirements and assessment expectations.
• Review evidence against established standards and controls.
• Ensure consistency across assessments within the program.
• Communicate framework updates to stakeholders.
• Facilitate collaboration between central IT and business entities.
• Produce assessment documentation, reports, governance deliverables.
• Contribute to continuous improvement of the evaluation process.
• Collaborate with cybersecurity experts across countries and areas.

Conhecimentos

Cyber Security

Information Security

IT Risk

NIST Framework

Regulatory Knowledge

Stakeholder Communication

Governance

Security Architecture

Descrição da oferta de emprego

We are looking for a Cyber Security Program Analyst to join an international cybersecurity team responsible for assessing and improving cyber resilience, security maturity, and IT risk management practices across multiple global entities.

This is an excellent opportunity for professionals looking to expand their expertise across a wide range of cybersecurity domains while contributing to a strategic and highly visible cybersecurity transformation program.

Hybrid – Porto (2 to 3 days per week on-site)

Key Responsibilities

• Conduct cybersecurity maturity assessments across different business entities.
• Support stakeholders in understanding cybersecurity requirements and assessment expectations.
• Review and evaluate submitted evidence against established cybersecurity standards and controls.
• Ensure consistency and accuracy across assessments performed within the program.
• Communicate framework updates, requirements, and key cybersecurity developments to relevant stakeholders.
• Facilitate collaboration between central IT providers and business entities.
• Produce assessment documentation, reports, and governance-related deliverables.
• Contribute to continuous improvement initiatives aimed at enhancing the cybersecurity evaluation process.
• Work closely with cybersecurity experts and stakeholders across multiple countries and business areas.

Required Skills & Experience

• Experience in Cyber Security, Information Security, IT Risk, IT Governance, or related areas.
• Understanding of cybersecurity frameworks such as NIST or equivalent standards.
• Knowledge of IT security principles, risk management, and regulatory requirements.
• Familiarity with cybersecurity governance and compliance activities.
• Awareness of operational resilience and cyber risk management concepts.
• Knowledge in one or more of the following areas:
• IT Continuity, Disaster Recovery, and Backup Management (including DORA requirements).
• Cryptography, Key Management, Certificate Management, or CKMS.
• Network Security, Hardening, Segmentation, and Security Architecture.
• Strong analytical and communication skills.
• Ability to engage with multiple stakeholders in an international environment.