Information Security Analyst

Hexa Group; Porto, Coimbra, Lisboa, Viseu; Híbrido; EUR 28 000 - 34 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

Psychological support

Training & certs

Flexible work

Childcare vouchers

Collaborative culture

Career development

Resumo da oferta

Hexa Group is seeking a Junior Information Security Analyst to join its internal security team in a hybrid role across Portugal. You will help protect corporate systems and support governance, compliance and continuous improvement.

The position offers exposure to technical security operations and ISMS activities, including audit prep, access governance and AI security governance. Three days/week in office across multiple cities.

Qualificações

• Academic background or initial professional experience in information security or related areas.
• Foundational understanding of information security principles and practices.
• Professional working proficiency in English, both written and spoken.
• Strong organization skills and attention to detail for documentation.
• Ability to communicate with technical teams and business stakeholders.

Responsabilidades

• Support security and compliance of endpoints, infrastructure and networks.
• Assist with device management, patching and vulnerability remediation.
• Support IAM processes including periodic access reviews.
• Assist with audit evidence collection and ISMS documentation.
• Maintain ISMS policies, procedures and security records.
• Monitor security indicators across infrastructure, devices, apps and networks.
• Prepare security reports to support risk visibility and compliance.
• Collaborate with teams to promote information security best practices.
• Contribute to governance and AI security initiatives.

Conhecimentos

Information security fundamentals

English communication

Documentation and record-keeping

Governance awareness

Analytical thinking

Collaboration with technical teams

Proactive and solution-oriented

Formação académica

Bachelor's in information security

Descrição da oferta de emprego

We are looking for a Junior Information Security Analyst to join an internal security team within the technology sector.

You will contribute to the protection of corporate systems, information assets and digital infrastructure while supporting information security governance, compliance and continuous improvement.

This opportunity offers exposure to both technical security operations and Information Security Management System (ISMS) activities, including audit preparation, access governance and emerging cybersecurity challenges.

The position follows a hybrid working model, with three days per week in the office, in Porto, Coimbra, Lisbon or Viseu.

WHAT YOU WILL DO

• - Support the security and compliance of corporate endpoints, infrastructure and network environments.
• - Contribute to device management, security updates, vulnerability remediation and patch management activities.
• - Assist with identity and access management processes, including periodic authorization reviews.
• - Support information security audits, certification activities and compliance assessments through evidence collection and documentation.
• - Maintain and improve ISMS policies, procedures and security records.
• - Monitor and analyze security indicators related to infrastructure, devices, applications and network environments.
• - Prepare security reports to support risk visibility, compliance monitoring and continuous improvement.
• - Collaborate with technical and business teams to promote information security best practices.
• - Contribute to emerging security initiatives, including the governance and secure utilization of AI technologies.

WHAT WE ARE LOOKING FOR

• - Academic background or initial professional experience in information security, cybersecurity or related areas.
• - Foundational understanding of information security principles and practices.
• - Professional working proficiency in English, both written and spoken.
• - Strong organization skills, attention to detail and commitment to accurate documentation.
• - Ability to communicate and collaborate effectively with technical teams and business stakeholders.
• - Analytical thinking, curiosity and motivation to develop new technical capabilities.
• - Responsible, proactive and solution-oriented approach to security and compliance activities.

TECHNICAL SKILLS

• - Information Security Management Systems (ISMS) and information security governance fundamentals.
• - Endpoint security, device management and patch management principles.
• - Identity and access management (IAM), access control and authorization reviews.
• - Information security compliance, audit evidence management and technical documentation.
• - Security monitoring, reporting and infrastructure security fundamentals.

NICE TO HAVE

• - Familiarity with Windows and Linux operating systems and endpoint administration.
• - Knowledge of network fundamentals, directory services and identity infrastructure.
• - Practical exposure to endpoint management, network security or cloud productivity platforms.
• - Familiarity with ISO/IEC 27001, IEC 62443, the Cyber Resilience Act (CRA) or the NIS2 Directive.
• - Basic scripting or automation capabilities.

WHAT WE OFFER

• - Private health insurance from your first day, with no waiting period and optional family extension.
• - Confidential psychological support through TEAM 24, including professional assistance, educational resources and live sessions.
• - Continuous learning opportunities, including access to training and professional certification development.
• - Opportunities to strengthen expertise in information security, cybersecurity best practices and AI governance.
• - Flexible working arrangements whenever compatible with the role and operational requirements.
• - Childcare vouchers and support measures that promote work-life balance.
• - Team initiatives, knowledge-sharing opportunities and a collaborative professional community.
• - A people-centered environment that values professional growth, well-being and long-term development.

EQUAL OPPORTUNITY

At Hexa, we are committed to equal opportunities, inclusion and respect for individual differences. In alignment with the principles of the Portuguese Diversity Charter, we welcome applications from people with diverse backgrounds, experiences and perspectives. Recruitment decisions are based on professional qualifications, competencies and role requirements.

HEXA LIFE

At Hexa, we are all Builders.

We believe meaningful progress comes from people working together, sharing knowledge and taking responsibility for what they create.

Our culture is built on three pillars: Honesty, Mutual Support and Agility. These principles guide how we collaborate, overcome challenges and deliver lasting value.

As a Hexa Builder, you will be part of a connected community where your contribution matters, your development is encouraged and collaboration extends beyond individual teams and projects.