Hybrid IT Risk Analyst — Cybersecurity & GRC Expert

Consort; Lisboa; Híbrido; EUR 43 000 - 52 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

TR card

CSE

Resumo da oferta

Consort Portugal is seeking an IT Risk Analyst in Lisbon to identify, assess, and monitor IT risks within complex enterprise environments. You will work with business and IT teams to ensure risks are managed in line with governance frameworks, regulatory requirements, and industry best practices.

The role demands 10+ years in IT risk, cybersecurity, or related fields, plus experience with GRC, risk reporting, and remediation coordination.

Qualificações

• At least 10 years of experience in IT Risk Management, IT Audit, Cybersecurity, or Information Security in complex environments.
• Experience with enterprise IT governance frameworks and translating technology risks into business insights.
• Banking or financial services industry experience is highly valued.
• Security trends and regulatory requirements knowledge.

Responsabilidades

• Identify, assess, and monitor IT risks across projects, systems, and production environments.
• Collaborate with business, IT, security, compliance, and risk functions to define remediation plans.
• Maintain IT risks in GRC tools and report risks to management committees.
• Develop risk indicators, dashboards, and presentations for governance.
• Coordinate remediation activities and support internal control processes.

Conhecimentos

IT Risk Management

Risk assessment

GRC frameworks

Cybersecurity risk

Data governance

Data protection

SDLC

Operational risk

Risk reporting

KRIs & dashboards

GRC tools

Regulatory awareness

ISO 31000 / CRISC

Project coordination

Ferramentas

ServiceNow GRC

Descrição da oferta de emprego

Consort Portugal is seeking an IT Risk Analyst in Lisbon to identify, assess, and monitor IT risks within complex enterprise environments. You will work with business and IT teams to ensure risks are managed in line with governance frameworks, regulatory requirements, and industry best practices.

The role demands 10+ years in IT risk, cybersecurity, or related fields, plus experience with GRC, risk reporting, and remediation coordination.