Cybersecurity Governance & Controls Lead

Decskill; Porto; On-site; EUR 70,000 - 120,000; Full time

Job summary

Decskill is seeking a seasoned Cybersecurity Control Officer to join our IT security team in Porto. You will support the global cybersecurity strategy, steer programmes, monitor milestones, risks and dependencies, and serve as a dedicated contact for assigned projects across regions.

You will document positions with clear rationale, coordinate governance meetings, and drive automation and AI-enabled improvements in security operations.

Qualifications

• Minimum 10 years of professional experience in cybersecurity and programme management.
• Proven ability to manage control activities, verify operations, and defend risk positions.
• Excellent communication, collaboration, and stakeholder influence skills.
• Fluent English; French is a plus.
• Knowledge of cybersecurity maturity frameworks and regulatory standards.

Responsibilities

• Support the operational execution of a global Cybersecurity Strategy across multiple regions and business entities.
• Support the steering of cybersecurity programmes and projects by monitoring delivery, milestones, risks, and dependencies.
• Escalate alerts, risks, and key attention points to the relevant stakeholders.
• Prepare and maintain project documentation, including plans, status reports, risk analyses, and reasoned positions supporting programme decisions.
• Prepare and coordinate governance committees, including schedules, presentation materials, minutes, and action tracking.
• Act as a dedicated point of contact for assigned projects or business scopes, ensuring regular project monitoring and communication with internal and external stakeholders.
• Collect, assess, challenge, and validate evidence of compliance with cybersecurity requirements across projects and BAU activities.
• Support the alignment and interpretation of cybersecurity requirements, particularly where requirements are disputed or ambiguous.
• Document cybersecurity positions with clear rationale and track remediation actions through to closure.
• Define and improve operational success indicators for assigned scopes and validate targets with programme management.
• Organize periodic reviews and propose action plans and roadmaps to achieve defined objectives.
• Identify and prioritize automation opportunities across programme processes, including evidence collection, campaign tracking, committee reporting, minutes production, and status consolidation.
• Reduce manual effort and single-person dependencies through standardized inputs, templates, and reporting pipelines.
• Perform deep-dive analyses into complex IT and cybersecurity operational topics.
• Assess associated risks and challenge operational assumptions using a structured and analytical approach.
• Synthesize complex technical information into clear, high-level insights for different stakeholders.
• Contribute to the modernization of cybersecurity programme operations through automation and AI-enabled use cases.

Skills

Cybersecurity risk knowledge

Regulatory knowledge

Control activities

Stakeholder influence

Data analysis

Power BI

Power Automate/SharePoint

Communication

English fluent

French is a plus

Tools

SharePoint administration

Power BI

Power Automate

Excel

Office 365

Job description

Decskill is seeking a seasoned Cybersecurity Control Officer to join our IT security team in Porto. You will support the global cybersecurity strategy, steer programmes, monitor milestones, risks and dependencies, and serve as a dedicated contact for assigned projects across regions.

You will document positions with clear rationale, coordinate governance meetings, and drive automation and AI-enabled improvements in security operations.