GRC Officer

Volkswagen Financial Services Portugal; Porto; Presencial; EUR 42 000 - 64 000; Tempo parcial

Vantagens oferecidas por esta oferta de emprego

Private health insurance

Life insurance

Meal allowance

Annual events

International projects

Resumo da oferta

Volkswagen Financial Services Portugal (VWFS Porto) seeks an IT Governance, Risk and Compliance specialist to support the Local IT-Governance, -Risk and -Compliance accountable and advance IT standards and regulatory compliance across markets.

You will contribute to cyber security initiatives, risk assessments and ISMS activities, coordinating with teams using Microsoft 365 and JIRA, and delivering reports and remediation tracking in a multinational, diverse environment.

Qualificações

• 2–3 years of IT compliance and security project experience in financial sector.
• Experience with IT infrastructure and IT security.
• Certifications ITIL 3 (minimum), Cobit 5 (minimum) and Prince 2 desired.

Responsabilidades

• Support Local IT-Governance, -Risk and -Compliance accountable.
• Assist with IT standards, policies and regulatory framework.
• Prepare reports, maintain controls and remediation plans.

Conhecimentos

IT compliance

IT security

Governance

Risk management

ISMS

Cyber security

JIRA

Microsoft 365

English (B2)

Formação académica

Computer Science / Cybersecurity degree

Ferramentas

Microsoft 365

JIRA

Descrição da oferta de emprego

It's been more than 70 years since Volkswagen Financial Services AG financed the first Volkswagen vehicles in Germany in 1949. A lot has changed since then, but our core goal hasn't; ensuring we meet the mobility needs of the people.

Volkswagen Financial Services today operates in 48 markets through its various subsidiaries, shareholdings, and joint ventures. Volkswagen Financial Services is the largest provider of automotive financial services worldwide.

At VWFS Porto, we are proud to foster a gender-equal workplace, where diversity is celebrated, and every individual is provided with equal opportunities to thrive and succeed.

What do we do?

VWFS Porto is a VWFS AG IT hub, and the first outside Germany. Here we will establish a long-term Business & IT company. Our primary goal is to service all European markets in implementing and maintaining contract management systems and another IT projects in other areas. Our focus is on: Core systems, satellite systems (such as document management systems, collection systems) but also extends to integrations, data, and large project organizations. For this we seek a hands-on Governance, Risk and Compliance Support.

Objectives:

Governance, Risk and Compliance support, focusing on Cyber Security topics

In this role you will be responsible for:

Providing to VWFS subsidiaries more supportive measures, in order to ensure the fulfilment of the IT Standards, policies and the regulatory framework in which VWFS is entitled. The resource will act as the main support for the Local IT-Governance, -Risk and -Compliance Accountable, and will support the fulfillment of IT-GRC related activities, such as reports, maintenance of control and inventories, execution of remediation plans, etc.

We believe that the right profile for this job should have / be:

• 2-3 years of project experience from IT compliance and security implementation projects in the financial sector, (with knowledge in process models such as Scrum, Kanban, etc.)
• Professional experience in the areas of IT infrastructure and IT security
• Technical background in Cyber Security topics, such as Cryptography, Hardening, Vulnerability Management, Malware Protection, Logging & Monitoring
• Experience for the commissioning and operation of an ISMS (information security management system).
• Certifications ITIL 3 (minimum), Cobit 5 (minimum) and Prince 2 are desired
• Extensive experience in managing emails and tickets with support of tools such as Microsoft 365 and JIRA, as well as prioritizing an optimized processing workflow
• Participation on previous projects and audit processes related to governance, risk, and compliance frameworks
• Knowledge about ISO 27001 / ISO 9001 frameworks
• Basic knowledge of regulatory requirements and standards for the financial industry
• Creation and monitoring of dashboards and reports preparation, to provide transparency to the stakeholders
• Complete university studies in computer science, Cybersecurity or any equivalent.
• Clear and precise communication with stakeholders, both written and verbal.
• Speaks and writes English fluently (at least B2 level)

What we Offer:

• Competitive package including private health insurance, life insurance and meal allowance (pay by meal card).
• Bonuses and benefits depending on performance
• Schooling allowance and pension scheme
• Incredible and unique annual company events
• Opportunity to work on an international project and be part of multicultural and multidisciplinary team
• Solid performance evaluation and career management methodologies
• Continuous training – technical and behavioural development