Cybersecurity engineer

GMV; Lisboa; On-site; EUR 50,000 - 70,000; Full time

Benefits offered by this job

Hybrid working

Relocation package

Flexible hours & summers

Career development & training

Wellbeing program

Job summary

GMV is seeking an information security professional to join its SES team in Lisbon, focusing on ISMS implementation, risk management, and regulatory compliance.

You will engage in international initiatives, support remediation strategies, and contribute to audits and security improvements across diverse environments.

Qualifications

• Experience with ISMS implementations and ISO/IEC 27001.
• Familiarity with GDPR/privacy frameworks and risk management.
• Clear written and verbal communication in English with stakeholders.

Responsibilities

• Support ISMS implementations and risk assessments across environments.
• Coordinate internal and external audits and compliance reviews.
• Design remediation strategies to address regulatory requirements.

Skills

ISMS knowledge

Risk assessment methodologies

English communication

Education

ISO/IEC 27001 Foundation or Lead Implementer

Job description

Are you passionate about information security and looking to make an impact in the space sector?

Join our international SES team and play a key role in supporting a long-running ISMS programme for a major European space client. You will be involved in ISMS implementation and continuous improvement, risk management activities, and ensuring compliance with both international standards and sector-specific security frameworks.

WHAT CHALLENGE WILL YOU BE TAKING ON?

You will support national and international engagements involving Information Security Management System (ISMS) implementations, risk assessments, compliance reviews, internal and external audits, and the design of remediation strategies to address regulatory requirements across diverse environments.

WHAT DO WE NEED IN OUR TEAM?

Required Knowledge and Skills

• Strong knowledge of ISO/IEC 27001 and information security management systems.
• Understanding of information security risk assessment methodologies, including ISO/IEC 27005.
• Excellent written and verbal communication skills in English, with the ability to produce clear documentation and communicate effectively with stakeholders

We are particularly interested in candidates with expertise, qualifications, or practical experience in

• Information Security Management, including ISO/IEC 27001 Foundation or Lead Implementer certification
• Privacy legislation and GDPR compliance frameworks
• OSINT techniques and threat intelligence gathering
• Ethical hacking, vulnerability assessment, and penetration testing
• Cyber incident management, response, and recovery
• DevSecOps and secure software development practices
• Business continuity planning aligned to ISO 22301
• PCI DSS compliance and payment security controls

WHAT DO WE OFFER

• Hybrid working model and 8 weeks per year of teleworking outside your usual geographical area.
• Flexible start and finish times, and intensive working hours Fridays and in summer.
• Personalized career plan development, training and language learning support.
• National and international mobility. Do you come from another country? We can offer you a relocation package.
• Competitive compensation with ongoing reviews, flexible compensation and discount on brands.
• Wellbeing program: Health, dental and accident insurance; free fruit and coffee, physical, mental and financial health training, and much more!
• In our recruitment processes you will always have telephone and personal contact, face-to-face or online, with our talent acquisition team. In addition, bank transfers and bank cards will never be requested. If you are contacted through another process, please get in touch with the person responsible for the selection process.
• We promote equal opportunities in recruitment, and we are committed to inclusion and diversity.