Information Security Consultant - Lisbon

Inetum; Lisboa; On-site; EUR 30,000 - 33,000; Full time

Job summary

Inetum in Lisbon is seeking an Information Security Consultant to support governance, compliance, risk management, and cybersecurity initiatives across the organization. The ideal candidate will have proven experience implementing internationally recognized security standards and regulatory frameworks, as well as a strong background in information security risk management and cyber awareness programs.

You will collaborate with business and IT teams to define, review, and maintain Information

Qualifications

• Experience implementing security standards and regulatory frameworks.
• Background in information security risk management.
• Ability to lead security governance and compliance initiatives.
• Experience in security awareness programs and training.

Responsibilities

• Support and deliver Information Security and Cybersecurity projects.
• Lead and contribute to security framework implementations and regulatory requirements.
• Develop and support cybersecurity awareness and training campaigns.
• Define, review, and maintain Information Security Policies, Processes, and Procedures.
• Conduct Information Security Risk Assessments and support risk treatment initiatives.
• Collaborate with business and technical teams to ensure security compliance.
• Provide security consulting and advisory services to internal stakeholders.
• Support continuous improvement of governance and compliance programs.

Skills

Information Security Governance

Cybersecurity Risk Management

Security Policies & Procedures

Security Compliance & Auditing

Risk Assessment

Cybersecurity Awareness

Tools

ISO 27001

ISO 20000-1

PCI DSS

SOC 1 Type I/II

SOC 2 Type I/II

Job description

Information Security Consultant - Lisbon

• Full-time
• Compensation: EUR 2,700 - EUR 2,930 - monthly

Inetum is a European leader in digital services, supporting organizations as they navigate continuous technological change. The company helps clients accelerate their digital transformation through a broad portfolio that includes consulting, application services, digital engineering, cloud, cybersecurity, platforms, and infrastructure services

We are seeking an Information Security Consultant to support security governance, compliance, risk management, and cybersecurity initiatives across the organization. The ideal candidate will have proven experience in implementing internationally recognized security standards and regulatory frameworks, as well as a strong background in information security risk management and cyber awareness programs.

Key Responsibilities

• Support and deliver projects related to Information Security and Cybersecurity.
• Lead and contribute to the implementation of security frameworks, standards, and regulatory requirements.
• Develop and support cybersecurity awareness and training campaigns across the organization.
• Define, review, and maintain Information Security Policies, Processes, and Procedures.
• Conduct Information Security Risk Assessments and support risk treatment initiatives.
• Collaborate with business and technical teams to ensure compliance with security requirements and best practices.
• Provide security consulting and advisory services to internal stakeholders.
• Support continuous improvement of information security governance and compliance programs.

Professional Experience

• Proven hands-on experience in the implementation of security standards, frameworks, and compliance programs.
• Experience working on Information Security and Cybersecurity projects within corporate environments.

Mandatory Technical Skills

• Demonstrated experience implementing and maintaining:
  • ISO 27001
  • ISO 20000-1
  • PCI DSS
  • SOC 1 (Type I and Type II)
  • SOC 2 (Type I and Type II)
• Experience with regulatory and compliance frameworks, including:
  • NIS2 Directive
  • DORA (Digital Operational Resilience Act)

Core Competencies

• Information Security Governance
• Cybersecurity Risk Management
• Security Policies, Processes, and Procedures Development
• Security Compliance and Auditing
• Risk Assessment and Risk Treatment
• Cybersecurity Awareness and Training
• Security Framework Implementation