Devoteam Cyber Trust | Cyber Project Manager | Sustainable Construction Sector

Devoteam; Lisboa; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Professional development

Employee growth

Growth culture

Collaborative environment

Job summary

Devoteam Cyber Trust is seeking a Cyber Project Manager in Lisbon to lead end-to-end cybersecurity projects from scoping to delivery. You will coordinate across IT, OT, cybersecurity teams, vendors and external providers to ensure secure-by-design outcomes.

The role requires proven program leadership, strong communication with executives and technical teams, and experience with GDPR, NIS2 and security governance. Join a growing team delivering critical data protection and Zero-Trust initiatives.

Qualifications

• Proven track record leading IT/security projects.
• Strong communication across executive and technical audiences.
• Knowledge of GDPR, NIS2, Secure-by-Design principles.
• Experience with project governance and reporting.

Responsibilities

• Lead cybersecurity projects from scoping to final delivery.
• Drive end-to-end governance, planning, and risk assessments.
• Coordinate across business units, IT, OT, cybersecurity teams, vendors and external service providers.
• Oversee RFI/RFP processes and renewals in collaboration with cybersecurity teams.
• Prepare steering committee materials and maintain project portfolio tools.

Skills

Project management

Stakeholder coordination

Risk management

Compliance governance

Technical understanding

Job description

Devoteam Cyber Trust | Cyber Project Manager | Sustainable Construction Sector

• Full-time
• Contract type: Permanent contract

Devoteam Cyber Trust is the Cybersecurity specialist arm of the Devoteam Group. With our 800+ experts located across EMEA, we aim to establish cybersecurity as an enabler of business success rather than a gatekeeper. We leverage an end-to-end approach to Cyber Resilience, Applied Security, and Managed Security services to secure the tech journey of large and medium-sized companies from all sectors and industries.

Since 2009, previously known as INTEGRITY, our team based in Portugal is specialised in providing cutting-edge Managed Security Services that combine its expertise and proprietary technology to consistently and effectively reduce the cyber risk of our clients.

The comprehensive service range includes Persistent Intrusion Testing, ISO 27001, PCI-DSS, GRC Consulting and Solutions, and Third-Party Risk Management. ISO 27001 (Information Security) and ISO 9001 (Quality) certified, PCI-QSA, and member of CREST and CIS - Centre for Internet Security, we provide services to a considerable number of clients, operating in more than 20 countries.

Project Execution & Management

End-to-End Governance: Lead cybersecurity projects from scoping to final delivery, defining clear objectives, scopes, and risk assessments.

Roadmap Projects: Initially drive the deployment of a critical cybersecurity data protection solution to block unauthorized USB device usage. Future projects will address Zero-Trust, Data Protection, Regulatory Compliance, and Application Security.

Best Practices: Ensure project execution follows rigorous industry standards in planning, quality assurance, and project communication.

Stakeholder Coordination: Act as the central point of contact across business units, IT, OT, cybersecurity teams, vendors, and external service providers.

Procurement Support: Lead end-to-end Request for Information (RFI) and Request for Proposal (RFP) processes for security solutions. Assist in the renewal of security solutions in close collaboration with cybersecurity teams and purchasing departments.

Reporting & Compliance

Reporting & Committees: Prepare and lead project committees, participate in steering committees, create presentations for Cyber Steering Committees, and maintain project portfolio management tools.

Technical Understanding: Develop functional and technical understanding of evaluated security solutions during assessment phases, prototypes, and test environments.

Risk & Compliance Management: Analyze project risks and implement mitigation measures. Guarantee strict adherence to internal and external standards (e.g., Minimum Security Rules, Security Policy, Secure-by-Design, NIS2, GDPR).

Project framing and scoping documentation

Steering Committee presentations and status reports

Process and deployment documentation (including prerequisites and step-by-step guidelines)

Transition-to-run (Move-to-Run) documentation

Project Management: Expert Level (Proven track record in scoping, leading, and delivering complex IT/Security projects)

Reporting & Communication: Expert Level (Strong written and verbal communication skills across executive and technical audiences)

Cybersecurity Fundamentals: Confirmed Level (Familiarity with frameworks, data protection, Zero-Trust, NIS2, GDPR, Secure-by-Design principles)

IT Fundamentals: Confirmed Level (Solid technical foundation in enterprise IT and OT environments)

What we offer:

• Professional development and monitoring talent;
• Commitment to our employees' development;
• Collaboration in a company that is constantly growing and evolving;
• Strong organisational culture: collaboration, sharing, flexibility, integrity and low ego.

The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization. All of our vacancies are open to people with disabilities.