GRC & Information Security Governance Specialist

Farfetch; Porto; Hybrid; EUR 60,000 - 85,000; Full time

Benefits offered by this job

Health insurance for family

Flexible working environment

Sabbatical program

Udemy access

Flexible benefits program

Job summary

Farfetch, based in Porto, is seeking a Cyber Governance, Risk and Compliance Specialist to strengthen its information security governance, risk management, and compliance practices. You will align policies and controls with business needs, regulatory requirements, and industry standards, working with stakeholders across the company.

You will conduct risk assessments, support audits, monitor compliance, review documentation, and help define mitigation actions.

Qualifications

• Bachelor's degree in Computer Science or Information Security.
• 4+ years in information security, GRC, risk or compliance.
• Good understanding of network protocols, design and operations.
• Experience with governance frameworks and standards like COBIT and ISO 27001.
• Certifications such as CRISC, CISA, CEH are a plus.
• DPIA experience is a plus.
• Strong English communication and proactive attitude.

Responsibilities

• Support development and continuous improvement of Farfetch's Information Security governance framework.
• Review and audit information security policies, procedures, and documentation.
• Monitor compliance with legal, regulatory, and industry standards.
• Perform information security risk assessments and identify mitigation actions.
• Support audits, assessments, and gap analyses across the security landscape.
• Coordinate and monitor company-wide information security controls.
• Contribute to information security awareness across the business.
• Collaborate with stakeholders to manage security risks, controls and compliance.

Skills

Cyber governance

Risk assessment

Security policies

Stakeholder collaboration

English communication

Self-motivation

Education

Degree in Computer Science / Information Security

Tools

COBIT

ISO 27001

Job description

Farfetch, based in Porto, is seeking a Cyber Governance, Risk and Compliance Specialist to strengthen its information security governance, risk management, and compliance practices. You will align policies and controls with business needs, regulatory requirements, and industry standards, working with stakeholders across the company.

You will conduct risk assessments, support audits, monitor compliance, review documentation, and help define mitigation actions.