Cybersecurity Specialist - Governance, Risk and Compliance (F/M/X)

Solvay; Portugal; Sur place; EUR 40 000 - 50 000; Plein temps

Avantages offerts par ce poste

Solvay Cares program with health, life

Hybrid work (2x weekly)

Language courses

Career development

Résumé du poste

Solvay in Portugal seeks a Cybersecurity Specialist (Risk & Compliance) to join the Governance, Risk and Compliance team within Security and Risk Management. You will lead hands-on risk assessments, develop security policies and manage third-party risk.

In this role you will maintain internal control and risk frameworks, coordinate audits, and ensure compliance with ISO 27001, GDPR, and NIS2, while fostering a cyber-conscious culture.

Qualifications

• Must have 5+ years in cyber security risk management, governance and control frameworks.
• Experience with risk assessments, GRC programs and ISO standards.
• Knowledge of NIS2, ISO 27001 and GDPR is preferred.
• Ability to lead initiatives and communicate with stakeholders.

Responsabilités

• Own and maintain Internal Control Framework within Digital Technologies, coordinating with external auditors.
• Maintain the risk management framework and risk register.
• Conduct qualitative and quantitative cybersecurity risk assessments, including Third-Party Risk Assessments (TPRM).
• Coordinate implementation of compensating controls and remediation activities.
• Track cybersecurity exceptions and risk acceptance, ensuring timely closure.
• Ensure compliance with information security policies and regulatory requirements.

Connaissances

GRC fundamentals

Cybersecurity frameworks

Auditing & risk assessment

Stakeholder communication

Formation

Bachelor's degree in IT/Engineering/Finance/Management

Outils

Audit tools

Description du poste

Solvay is all about chemistry. We're not just referring to chemical reactions here, but also to the magic that occurs when the brightest minds get to work together. This is where our true strength lies. In you. In your future colleagues and in all your differences. And of course, in your ideas to improve lives while preserving our planet's beauty for the generations to come.

About the role

Our Governance, Risk and Compliance team, is integrated in the Security and Risk Management department. Reporting to the CISO, the team establishes and maintains the governance, risk, and compliance structures that ensure cybersecurity risks are managed consistently across the organization.

As a Cybersecurity Specialist (Risk & Compliance), you will play a hands‑on, operational, and analytical role in managing cybersecurity risk and ensuring compliance. You will get the opportunity to conduct audits, perform risk assessments, develop security policies, manage our suppliers' risks protecting sensitive data by acting as their key contact, and have a positive impact on the Solvay Group. You will be accountable for:

• Own and maintain the Internal Control Framework, ensuring it remains relevant and up to date, and act as the focal point for internal controls within Digital Technologies, including coordination with external auditors.
• Maintain the risk management framework and risk register, ensuring risks are properly documented and monitored.
• Conduct qualitative and quantitative cybersecurity risk assessments, including Third-Party Risk Assessments (TPRM), to evaluate, validate and remediate potential threats.
• Coordinate the implementation of compensating controls and ensure appropriate mitigation measures are in place.
• Track and manage cybersecurity exceptions, risk acceptance and remediation activities, ensuring timely closure of actions and findings.
• Ensure compliance with information security policies, standards and regulatory requirements, supporting audits and fostering a cyber‑conscious culture across the organization.

We offer a permanent contract based on hybrid working mode (2x a week at the office in Carnaxide).

About you

Relevant education degree or equivalent in IT, Finance, Engineering or Management. Relevant work experience of 5+ years in cyber security risk management, governance and control frameworks.

Competencies

• Knowledge of cybersecurity frameworks, standards, and regulations (e.g., NIS2, ISO 27001, GDPR). Professional certifications are desired
• Proven experience in cybersecurity GRC, risk management, compliance, ISO implementation and audits;Ability to work collaboratively and lead initiatives related to cybersecurity governance, risk management, compliance, and ISO standards
• Strong analytical and problem‑solving skills, as well as excellent communication and interpersonal skills
• Experience in consulting industry and professional certifications are a plus

Behaviors

• Autonomous
• Rigorous
• Proactive

About the pay

Attractive and equitable pay for all: compensation is determined within a range to foster your development in the role. The base pay expected for this role is € 40,000 - € 50,000 per year in Portugal.

Your salary may ultimately be higher or lower based on your skills and experience. Additionally, we provide a competitive total rewards package that includes a bonus and/or other incentives.

Benefits

• Solvay Cares program: minimum of 16 weeks of parenting leave for all employees and package with healthcare, disability and life insurance coverage.
• Prioritization of well‑being: work‑life balance promotion, flexible approach to work part‑time or hybrid work arrangements (depending on the type of job), employee assistance program with access to physical and psychological support.
• Professional development: prioritization of internal talents for career progression, access to a training platform, opportunities to join Employee Resource Groups (ERG) for experience sharing and mentorship and free language courses.

About us

Solvay, a pioneering chemical company with a legacy rooted in founder Ernest Solvay's pivotal innovations in the soda ash process, is dedicated to delivering essential solutions globally through its workforce of over 9,000 employees. Since 1863, Solvay harnesses the power of chemistry to create innovative, sustainable solutions that answer the world's most essential needs such as purifying the air we breathe and the water we drink, preserving our food supplies, protecting our health and well‑being, creating eco‑friendly clothing, making the tires of our cars more sustainable and cleaning and protecting our homes.

We value the diversity that individuals bring and we invite you to consider a future with us, regardless of background, age, gender, national origin, ethnicity, religion, sexual orientation, ability or identity. We encourage individuals who may require any assistance or accommodations to let us know to ensure a seamless application experience. We are here to support you throughout the application journey and want to ensure all candidates are treated equally. If you are unsure whether you meet all the criteria or qualifications listed in the job description, we still encourage you to apply.