Cybersecurity Specialist

Edp; Porto; On-site; EUR 50,000 - 75,000; Full time

Job summary

EDP is seeking a Cybersecurity Specialist for its Cyber Resilience department in Porto. The role focuses on monitoring regulatory developments, ensuring ISMS/BCMS alignment, and supporting risk management and audits to protect critical infrastructure.

You will collaborate with technical teams and regulatory authorities, driving policies and procedures while maintaining a proactive, detail-oriented mindset in a regulated energy context.

Qualifications

• University degree in Computer Engineering, Information Systems Management, Cybersecurity or similar fields.
• Solid experience in Information Security Management Systems (ISMS/SGSI) and Business Continuity Management Systems (BCMS/SGCN).
• Minimum of 5 years’ professional experience in relevant roles in cybersecurity, risk management or information security management systems.
• In-depth knowledge of ISO 27001 and ISO 22301 standards.
• Experience in audits, risk analysis and incident management.
• Ability to communicate with technical teams, management committees and regulatory authorities.
• Fluent command of English, both spoken and written.
• Dynamic and proactive profile with initiative and problem-solving mindset.
• Strong sense of responsibility, accuracy and attention to detail.
• Knowledge of European regulatory framework for energy and critical infrastructure.

Responsibilities

• Monitor legal, regulatory and normative developments applicable to E-REDES, including NIS2/SRI2 and related standards.
• Support management of the Information Security Management System to align with legal and regulatory requirements.
• Assist cybersecurity risk management through identification, assessment, treatment, monitoring and reporting.
• Contribute to defining and improving cybersecurity policies, standards and procedures.
• Assist audits and certification activities and track action plans.

Skills

ISMS/SGSI

BCMS/SGCN

Audits

Incident management

Stakeholder communication

English proficiency

Problem solving

Regulatory awareness

Education

University degree in Computer Engineering/IS/Cybersecurity

Job description

Our company is part of EDP, a global energy group present in around 30 markets with a particular emphasis on renewable energies. With more than 45 years of experience, we have been consolidating a relevant presence on the world energy scene based on the commitment to be all-green by 2030, leading the energy transition. With more than 13,000 employees around the world, we are committed to using our energy and heart to drive a better tomorrow.

The EDP Group is an integrated energy utility, with operations around the world.

Within its electricity transmission and distribution activity (the EDP Networks Platform) it currently manages operations in Portugal, Spain, and Brazil

Cyber Resilience department is looking for a Cybersecurity Specialist.

What you will do:

• Monitor legal, regulatory and normative developments applicable to E-REDES, namely NIS2/SRI2, the European Cybersecurity Network Code, the Cyber Resilience Act, the Cybersecurity Act and ISO/IEC 27001, assessing impacts and internal adaptation needs.
• Contribute to the management, operation and continuous improvement of the Information Security Management System, ensuring alignment with applicable legal, regulatory and normative requirements.
• Support the ongoing management of cybersecurity risk, including the identification, assessment, treatment, monitoring and reporting of relevant risks for the organisation.
• Collaborate in the definition, implementation, review and continuous improvement of cybersecurity policies, standards and procedures, ensuring alignment with EDP Group guidelines, market best practices and applicable legal, regulatory and normative requirements.
• Follow up on internal, external and certification audits, as well as other compliance assessments, supporting the definition, implementation and monitoring of the respective action plans.

Employment type: Full-Time

Work site: Onsite

What are we looking for:

• University degree in Computer Engineering, Information Systems Management, Cybersecurity or similar fields;
• Solid experience in Information Security Management Systems (ISMS/SGSI) and Business Continuity Management Systems (BCMS/SGCN);
• Minimum of 5 years’ professional experience in relevant roles in cybersecurity, risk management or information security management systems;
• In-depth knowledge of ISO 27001 and ISO 22301 standards;
• Experience in audits, risk analysis and incident management;
• Ability to communicate with technical teams, management committees and regulatory authorities;
• Fluent command of English, both spoken and written;
• Dynamic and proactive profile, with strong initiative and a problem-solving mindset;
• Strong sense of responsibility, accuracy and attention to detail;
• Critical thinking, proactivity and decision-making ability in complex and regulated environments.
• Dynamic and proactive profile, with strong initiative and results orientation;
• Good teamwork and interpersonal skills;
• Knowledge of the European regulatory framework applicable to the energy and critical infrastructure sectors;
• Experience liaising with internal and external stakeholders in regulated environments;
• Relevant cybersecurity certifications, such as ISO 27001 Lead Implementer/Auditor, CISM or CISSP;
• Availability for occasional travel within Portugal and across Europe.

More than academic knowledge and technical skills, we are looking for ambitious people who are enthusiastic about the future and who bring human skills aligned with our purpose.

Equal opportunities for all

Our vision is that each person combines their unique characteristics and experiences to fulfill our mission of creating new energy for the planet. We are an inclusive employer, ensuring all candidates are treated fairly throughout the recruitment process. We welcome and value all people, and we are committed to fostering a sense of belonging for each person who is part of the EDP group.

Need more reasons to apply?

As a top employer we:

Empower our employees through a positive and innovative work environment that promotes collaboration and agile decision-making;

Respect and value each person, providing a flexible, healthy, and inclusive workplace with a range of attractive benefits;

Provide a meaningful work experience and prepare our people for future challenges through different opportunities for development and internal mobility;

Our efforts have resulted in several distinctions over time, highlighting the EDP group's strong positioning and its dedication and commitment to attracting and retaining the best talent:

Top employer certification by Top Employers Institute

Part of the Bloomberg Gender-Equality Index

Top 100 Workplaces by Houston Chronicle