Hybrid IT Risk & Permanent Controls Analyst

Consort; Porto; Hybrid; EUR 44,000 - 56,000; Full time

Benefits offered by this job

Health insurance

Hybrid work model (50%)

Continuous training opportunities

Job summary

Consort Group is hiring a Risk Analyst & Permanent Control to identify and monitor cyber and operational risks within a high-stakes IT Payments environment. You will support permanent control activities, prepare risk reporting, and coordinate remediation actions across security, development and production teams.

The role requires 3+ years in IT risk management or related fields, strong analytical skills, and ability to collaborate with multiple stakeholders in a complex IT landscape.

Qualifications

• 3+ years of experience in IT risk management, cybersecurity risk, permanent control or related field.
• Strong understanding of risk identification, assessment and remediation processes.
• Experience with RCSA, operational incidents, audits and control plans.
• Knowledge of cybersecurity governance and IT risk frameworks.
• Familiarity with DORA and PCI-DSS is a strong plus.
• Proactive, analytical mindset with stakeholder management skills.

Responsibilities

• Identify, analyse and monitor cyber and operational risks in IT Payments environment.
• Support permanent control activities and remediation actions.
• Coordinate risk reporting to cybersecurity and risk stakeholders.
• Perform root-cause analysis and assess impacts and events.
• Contribute to risk governance and control framework improvements.
• Monitor remediation plans and challenge owners when required.

Skills

English Mastery

French Mastery

IT Risk Management

Cybersecurity Risk

Permanent Control

Operational Risk

RCSA

Remediation

GRC Tools

Microsoft Office

Tools

ServiceNow

GRC Tools

Job description

Consort Group is hiring a Risk Analyst & Permanent Control to identify and monitor cyber and operational risks within a high-stakes IT Payments environment. You will support permanent control activities, prepare risk reporting, and coordinate remediation actions across security, development and production teams.

The role requires 3+ years in IT risk management or related fields, strong analytical skills, and ability to collaborate with multiple stakeholders in a complex IT landscape.