CyberProgram Analyst

Inetum2; Porto; Presencial; EUR 42 000 - 56 000; Tempo integral

Resumo da oferta

Inetum2 is seeking a Cyber Security Program Analyst to join a global transformation initiative focused on strengthening cyber resilience, IT risk management, and operational resilience across international entities in Portugal and beyond.

You will work in a Group Cyber Security Program team, collaborating with cybersecurity experts and risk professionals to harmonize security practices, ensure regulatory compliance, and drive maturity across the organization.

Qualificações

• Knowledge of cyber security principles and IT risk management.
• Understanding of information security concepts and governance frameworks.
• Familiarity with regulatory compliance requirements.
• Strong analytical and critical-thinking skills.

Responsabilidades

• Support deployment and execution of cybersecurity maturity assessments across assigned entities.
• Guide stakeholders in understanding cybersecurity requirements and gathering evidence for compliance reviews.
• Review and assess submitted evidence for consistency with evaluation standards.
• Maintain regular communication with stakeholders about framework updates and remediation expectations.
• Act as a liaison between centralized IT providers and local entities to facilitate cybersecurity initiatives.
• Document assessment results and contribute to governance reporting and dashboards.
• Participate in continuous improvement of assessment methodologies, processes, and tooling.
• Support strategic initiatives to enhance cybersecurity maturity and operational resilience.

Conhecimentos

Cyber Security

IT Risk Management

Information Security

Governance & Compliance

Analytical Thinking

Descrição da oferta de emprego

We are looking for a Cyber Security Program Analyst to join a global cybersecurity transformation initiative focused on strengthening cyber resilience, IT risk management, and operational resilience across multiple international entities.

This role sits within a Group Cyber Security Program team responsible for driving cybersecurity maturity, harmonizing security practices, and ensuring compliance with internal frameworks and regulatory requirements. You will work in a highly collaborative and international environment, interacting with cybersecurity experts, risk professionals, and stakeholders across different business entities.

The position offers a unique opportunity to gain exposure to a broad range of cybersecurity domains, contribute to strategic initiatives, and play an active role in improving the organization's overall security posture.

Key Responsibilities

• Support the deployment and execution of cybersecurity maturity assessments across assigned entities.
• Guide stakeholders in understanding cybersecurity requirements and gathering the necessary evidence for compliance reviews.
• Review and assess submitted evidence, ensuring consistency and alignment with established evaluation standards.
• Maintain regular communication with stakeholders regarding framework updates, changes, and remediation expectations.
• Act as a liaison between centralized IT providers and local entities to facilitate cybersecurity initiatives.
• Document assessment results and contribute to governance reporting and management dashboards.
• Participate in the continuous improvement of assessment methodologies, processes, and tooling.
• Support strategic initiatives designed to enhance cybersecurity maturity and operational resilience across the organization.

Why Join This Team?

• Be part of a large-scale cybersecurity transformation program with strategic visibility.
• Collaborate with cybersecurity specialists and stakeholders across multiple countries and business areas.
• Develop expertise across a wide range of cybersecurity, IT risk, and resilience domains.
• Gain valuable exposure that can support future career growth toward roles such as Cyber Security Manager, CISO, IT Risk Manager, Program Manager, or Cyber Security Specialist .

Required

• General knowledge of Cyber Security, IT Risk Management, and Information Security principles .
• Understanding of IT processes, security controls, and governance frameworks.
• Familiarity with risk management concepts and regulatory compliance requirements.
• Strong analytical and critical-thinking skills.

Preferred

• Knowledge or experience in one or more of the following areas:
  • IT Continuity, Disaster Recovery, and Backup Management , including regulatory requirements such as DORA.
  • Cryptography , including key management, certificate management, and cryptographic governance.
  • Network Security , including network segmentation, hardening, and secure architecture principles.
  • Security frameworks and standards such as NIST , ISO 27001, CIS Controls, or equivalent.
  • Operational Resilience and Cyber Risk Management programs.

Languages

• English: Fluent / Professional Proficiency (mandatory)
• French: Basic knowledge (nice to have)