Cybersecurity Governance & Risk Analyst

Caixa Mágica Software; Porto; On-site; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Health and Life Insurance

Tech equipment + SIM Card + personal 1

Training in latest technologies

Social events and team buildings

Coffee, fruits, snacks at the office

Warm welcoming at the office

Job summary

Caixa Mágica Software is seeking a cybersecurity professional to join the Group Cyber Program team, partially located in Portugal. You will help develop the Portugal platform and ensure core cybersecurity activities align with the Group's risk framework.

You will deploy maturity evaluation, assist entities with evidence, and coordinate with IT providers while contributing to ongoing improvements and training in the latest technologies.

Qualifications

• Knowledge of IT continuity and backups management (including DORA requirements).
• Knowledge of cryptography (key management, certificate management, CKMS…).
• Knowledge of network security (micro segmentation, hardening network architecture…).
• Knowledge of a standard framework (NIST or equivalent).
• General knowledge of IT and IT security, key related processes and regulatory framework.
• Knowledge of Risk Knowledge & Awareness.
• Fluent in English.
• French notions is nice to have.

Responsibilities

• Deploy the maturity evaluation process on the entities of your perimeter.
• Help the entities understand the requirements and delivers the required evidences.
• Evaluate the entities evidences submission in coherence with the assessments of the other entities.
• Communicate and inform the entities of all changes impacting them.
• Facilitate the relationship between the Group IT providers and the entities.
• Document the results of the assessments answering the reporting requested by the Governance of the program.
• Develop internal projects to enhance the Cyber Program evaluation process.

Skills

IT continuity management

Cryptography

Network security

Risk knowledge & awareness

NIST framework

English fluency

French notions

Job description

Overview:

You will be part of the Group Cyber Program team partially located In Portugal. You will play a key role to develop Portugal platform, ensuring core Cyber Security activities are performed by all the entities of the Group in compliance to the Group Cyber security and IT Risk framework enabling the adequate protection of the client.

What will you do?

• Deploy the maturity evaluation process on the entities of your perimeter
• Help the entities understand the requirements and delivers the required evidences
• Evaluate the entities evidences submission in coherence with the assessments of the other entities
• Communicate and inform the entities of all changes impacting them
• Facilitate the relationship between the Group IT providers and the entities
• Document the results of the assessments answering the reporting requested by the Governance of the program
• Develop internal projects to enhance the Cyber Program evaluation process

What are we looking for?

• Knowledge of IT Continuity and Backups Management (including DORA requirements
• Knowledge of Cryptography (key management, certificate management, CKMS…)
• Knowledge of Network security (micro segmentation, hardening network architectural…)
• Knowledge of a standard framework (NIST or equivalent)
• General knowledge of IT and IT security, key related processes and regulatory framework
• Knowledge of Risk Knowledge & Awareness
• Fluent in English
• French notions is nice to have

What can you expect from us?

• A permanent job contract for a long term project;
• Tech equipment + SIM Card + personal smartphone;
• Health and Life Insurance;
• Social events and team buildings;
• The commitment of letting you grow with us, and be rewarded accordingly;
• A dynamic and young team that will be always there to support you;
• Training in the latest technologies;
• Coffee, fruits, snacks and a warm welcoming when you pass by the office.