Cybersecurity Control Officer

Decskill; Porto; On-site; EUR 70,000 - 120,000; Full time

Job summary

Decskill is seeking a seasoned Cybersecurity Control Officer to join our IT security team in Porto. You will support the global cybersecurity strategy, steer programmes, monitor milestones, risks and dependencies, and serve as a dedicated contact for assigned projects across regions.

You will document positions with clear rationale, coordinate governance meetings, and drive automation and AI-enabled improvements in security operations.

Qualifications

• Minimum 10 years of professional experience in cybersecurity and programme management.
• Proven ability to manage control activities, verify operations, and defend risk positions.
• Excellent communication, collaboration, and stakeholder influence skills.
• Fluent English; French is a plus.
• Knowledge of cybersecurity maturity frameworks and regulatory standards.

Responsibilities

• Support the operational execution of a global Cybersecurity Strategy across multiple regions and business entities.
• Support the steering of cybersecurity programmes and projects by monitoring delivery, milestones, risks, and dependencies.
• Escalate alerts, risks, and key attention points to the relevant stakeholders.
• Prepare and maintain project documentation, including plans, status reports, risk analyses, and reasoned positions supporting programme decisions.
• Prepare and coordinate governance committees, including schedules, presentation materials, minutes, and action tracking.
• Act as a dedicated point of contact for assigned projects or business scopes, ensuring regular project monitoring and communication with internal and external stakeholders.
• Collect, assess, challenge, and validate evidence of compliance with cybersecurity requirements across projects and BAU activities.
• Support the alignment and interpretation of cybersecurity requirements, particularly where requirements are disputed or ambiguous.
• Document cybersecurity positions with clear rationale and track remediation actions through to closure.
• Define and improve operational success indicators for assigned scopes and validate targets with programme management.
• Organize periodic reviews and propose action plans and roadmaps to achieve defined objectives.
• Identify and prioritize automation opportunities across programme processes, including evidence collection, campaign tracking, committee reporting, minutes production, and status consolidation.
• Reduce manual effort and single-person dependencies through standardized inputs, templates, and reporting pipelines.
• Perform deep-dive analyses into complex IT and cybersecurity operational topics.
• Assess associated risks and challenge operational assumptions using a structured and analytical approach.
• Synthesize complex technical information into clear, high-level insights for different stakeholders.
• Contribute to the modernization of cybersecurity programme operations through automation and AI-enabled use cases.

Skills

Cybersecurity risk knowledge

Regulatory knowledge

Control activities

Stakeholder influence

Data analysis

Power BI

Power Automate/SharePoint

Communication

English fluent

French is a plus

Tools

SharePoint administration

Power BI

Power Automate

Excel

Office 365

Job description

We are growing. And we are looking for talented people.

At Decskill, we believe that technological excellence is driven by human talent.

We are an IT consulting company with more than 10 years of consolidated experience in the market, focused on building long-term relationships with both our clients and our people. Today, we are a community of over 800 professionals, working from Lisbon, Porto, and Madrid, contributing to impactful technology initiatives.

As part of the Astek Group, we combine a strong local culture with a global presence, being active in around 23 countries across 4 continents. This allows us to offer an international context, diverse challenges, and long-term career opportunities, while staying close to our teams.

We are looking for a Cybersecurity Control Officer!

Responsibilities:

• Support the operational execution of a global Cybersecurity Strategy across multiple regions and business entities.
• Support the steering of cybersecurity programmes and projects by monitoring delivery, milestones, risks, and dependencies.
• Escalate alerts, risks, and key attention points to the relevant stakeholders.
• Prepare and maintain project documentation, including plans, status reports, risk analyses, and reasoned positions supporting programme decisions.
• Prepare and coordinate governance committees, including schedules, presentation materials, minutes, and action tracking.
• Act as a dedicated point of contact for assigned projects or business scopes, ensuring regular project monitoring and communication with internal and external stakeholders.
• Collect, assess, challenge, and validate evidence of compliance with cybersecurity requirements across projects and BAU activities.
• Support the alignment and interpretation of cybersecurity requirements, particularly where requirements are disputed or ambiguous.
• Document cybersecurity positions with clear rationale and track remediation actions through to closure.
• Define and improve operational success indicators for assigned scopes and validate targets with programme management.
• Organize periodic reviews and propose action plans and roadmaps to achieve defined objectives.
• Identify and prioritize automation opportunities across programme processes, including evidence collection, campaign tracking, committee reporting, minutes production, and status consolidation.
• Reduce manual effort and single-person dependencies through standardized inputs, templates, and reporting pipelines.
• Perform deep-dive analyses into complex IT and cybersecurity operational topics.
• Assess associated risks and challenge operational assumptions using a structured and analytical approach.
• Synthesize complex technical information into clear, high-level insights for different stakeholders.
• Contribute to the modernization of cybersecurity programme operations through automation and AI-enabled use cases.

Requirements:

• Minimum 10 years of professional experience.
• General knowledge of cybersecurity risks, domains, and programme management.
• Knowledge of regulatory standards and requirements applicable to cybersecurity.
• Experience with control activities, including verifying operations, challenging evidence, and ensuring procedures are followed.
• Ability to challenge, approve, and defend risk positions using clear and reasoned rationale.
• Strong understanding of IT processes, assets, and solutions.
• Ability to understand business needs and the relationship between business and IT.
• Knowledge of cybersecurity maturity frameworks and assessment methodologies.
• Strong experience with Microsoft Office, particularly Excel and PowerPoint, for data manipulation and executive presentations.
• Knowledge of SharePoint administration and data management.
• Experience with Power BI for dashboarding and reporting.
• Experience with Power Automate and/or SharePoint workflow automation.
• Hands-on exposure to AI/LLM tools and practical use cases.
• Strong communication skills, both written and verbal, with the ability to synthesize and simplify complex information.
• Strong collaboration and teamwork skills.
• Ability to influence stakeholders and generate commitment.
• High adaptability and rigor, with meticulous attention to detail.
• Strong organizational skills and the ability to manage multiple projects, entities, and reporting cycles in parallel.
• Ability to understand, explain, and support organizational change.
• Ability to challenge the quality of information and evidence.
• Ability to develop and leverage cross-functional networks across security operations, risk, IT, and compliance.
• Ability to anticipate business and regulatory evolution.
• Fluent English is mandatory.
• French is a plus.

Are you looking for an environment that values curiosity and commitment? Here, your contribution has real impact and individual growth is taken seriously.

Find with us the right opportunity to grow!

What you can expect from us:

• Long-term projects with national and international context
• Opportunities to grow technically and professionally
• A people-first culture, focused on transparency and trust
• Teams that value ownership, collaboration and stability.

Decskill is committed to equality and non-discrimination with all our talents. We recruit and promote talent, based on diversity and inclusion, regardless of age, gender, ethnicity, race, nationality or any other form of discrimination incompatible with the dignity of the human being.