Cyber Strategy, Risk & Architecture Manager

Accenture Portugal; Lisboa; On-site; EUR 70,000 - 100,000; Full time

Job summary

Accenture CyberSecurity in Portugal seeks a Cyber Strategy, Risk & Architecture Manager to strengthen governance, risk management and regulatory compliance across client cybersecurity programs.

You will lead complex engagements with senior stakeholders, design governance models and drive security transformation. You will translate regulations into practical programs, define KPIs and dashboards, and mentor junior team members. Occasional travel within Europe is expected.

Qualifications

• 7+ years of experience in Cybersecurity, Information Security, Technology Risk, IT Audit or GRC, preferably in consulting or multinational environments.
• Strong experience leading GRC, risk, compliance or security transformation projects.
• Fluency in Portuguese and English.

Responsibilities

• Lead Cybersecurity Governance, Risk & Compliance (GRC) projects for national and international clients
• Design and implement cybersecurity governance models, security strategies, policies, standards and control frameworks
• Lead cybersecurity risk and maturity assessments, identify gaps, define remediation plans
• Support clients on regulations and frameworks such as NIS2, DORA, ISO/IEC 27001, NIST CSF and GDPR
• Design and strengthen ISMS and cybersecurity control environments
• Advise on third-party risk, regulatory compliance and security governance
• Define cybersecurity KPIs, KRIs, dashboards and reporting
• Engage with CISOs and stakeholders, translating risk into business impact
• Lead multidisciplinary project teams, coordinating activities and quality
• Contribute to proposals and client development, mentoring junior staff
• Travel within Europe for project deliveries and client meetings

Skills

Cybersecurity GRC

Risk management

Stakeholder management

Project management

Portuguese & English

Tools

ServiceNow GRC/IRM

Archer

Job description

Accenture CyberSecurity helps organizations prepare, protect, detect, respond, and recover along with all aspects of the security lifecycle. Cybersecurity challenges are different for every business in every industry. Leveraging our global resources and advanced technologies, we create integrated, turnkey solutions tailored to our client's needs across their entire value chain. Whether we're defending against known cyberattacks, detecting and responding to the unknown, or running an entire security operations center, we will help companies build cyber resilience to grow with confidence. We blend risk strategy, digital identity, cyber defense, application security and managed service solutions to rethink the entire security lifecycle.

As a Cyber Strategy, Risk & Architecture Manager, you will help clients strengthen their cybersecurity governance, risk management and regulatory compliance capabilities. You will lead complex engagements, work closely with senior stakeholders and support organizations in translating cybersecurity and regulatory requirements into practical and sustainable security programs.

What You'll Do

• Lead Cybersecurity Governance, Risk & Compliance (GRC) projects and workstreams for national and international clients
• Design and implement cybersecurity governance models, security strategies, policies, standards and control frameworks
• Lead cybersecurity risk and maturity assessments, identifying gaps, defining remediation plans and supporting clients throughout their security transformation journey
• Support clients in assessing and implementing requirements associated with regulations and frameworks such as NIS2, DORA, ISO/IEC 27001, NIST Cybersecurity Framework and GDPR
• Design and strengthen Information Security Management Systems (ISMS) and cybersecurity control environments
• Advise clients on third-party risk, cyber risk management, regulatory compliance and security governance
• Define cybersecurity KPIs, KRIs, dashboards and reporting mechanisms to provide management and executive-level visibility over risk and compliance
• Engage with CISOs and senior business and technology stakeholders, translating complex cybersecurity risks into clear business impact and actionable recommendations
• Lead multidisciplinary project teams, coordinating activities, deliverables, timelines and quality
• Contribute to proposals, client presentations and business development activities, identifying opportunities to expand cybersecurity services
• Support the development of junior team members through coaching, mentoring and knowledge sharing

What You'll Bring

• 7+ years of professional experience in Cybersecurity, Information Security, Technology Risk, IT Audit or GRC, preferably within consulting or complex multinational environments
• Strong experience leading Cybersecurity GRC, risk, compliance or security transformation projects
• Solid knowledge of cybersecurity governance, risk assessment methodologies, security controls and compliance frameworks
• Practical knowledge of standards and regulatory requirements such as ISO/IEC 27001, NIST CSF, NIS2 and DORA
• Experience designing or implementing cybersecurity governance models, policies, controls and risk-management processes
• Proven ability to manage multiple stakeholders and lead client-facing engagements
• Strong project management and delivery capabilities
• Fluency Portuguese and English

Legal:

Must own a valid work permit or EU/Schengen Space Nationality to legally work in Portugal

What Will Set You Apart

• Relevant certifications such as:
• CISA
• CISM
• CRISC
• CISSP
• ISO/IEC 27001 Lead Implementer/Lead Auditor
• Hands-on experience with major European cybersecurity regulatory transformation programmes, particularly NIS2 and DORA
• Experience developing cybersecurity operating models, Business Continuity/Resilience frameworks or third-party risk management programmes
• Experience with GRC platforms such as ServiceNow GRC/IRM, Archer or similar solutions
• Strong commercial mindset and experience supporting proposals, client development and cybersecurity business growth

Flexibility for occasionally travels within Europe for key project deliveries and client meetings.