GRC & InfoSec Risk Consultant – ISO 27001 Lead Auditor

Balwurk; Lisboa; Presencial; EUR 40 000 - 60 000; Tempo integral

Resumo da oferta

A leading consulting firm in Lisbon is seeking an experienced GRC professional to define, implement, and monitor Governance, Risk & Compliance frameworks. The role requires 2-5 years of relevant experience in Information Security, auditing, and risk management, with mandatory ISO 27001 Lead Auditor certification. Excellent command of English and Portuguese is essential. The candidate will work closely with technical and management teams to ensure compliance with industry standards and improve security practices.

Qualificações

• 2 to 5 years of experience in GRC, Information Security, IT Risk or Compliance roles.
• Experience in risk assessments, audits, compliance and defining security controls.
• Good knowledge of frameworks and standards such as ISO 27001, ISO 22301, NIST CSF.

Responsabilidades

• Define, implement and monitor Governance, Risk & Compliance frameworks.
• Conduct Information Security Risk assessments.
• Support technology risk management and third-party risk.

Conhecimentos

ISO 27001 certification projects

Supplier auditing

Business continuity

GRC tools

Information security awareness

Knowledge of DORA and NIS2

ISO 27001 Lead Implementer

CRISC

CISA

CISM

Formação académica

ISO 27001 Lead Auditor certification

Descrição da oferta de emprego

A leading consulting firm in Lisbon is seeking an experienced GRC professional to define, implement, and monitor Governance, Risk & Compliance frameworks. The role requires 2-5 years of relevant experience in Information Security, auditing, and risk management, with mandatory ISO 27001 Lead Auditor certification. Excellent command of English and Portuguese is essential. The candidate will work closely with technical and management teams to ensure compliance with industry standards and improve security practices.