Information Security Consultant - Lisbon

Inetum2; Lisboa; Hybrid; EUR 45,000 - 80,000; Full time

Job summary

Inetum2 in Lisbon, Portugal is seeking an Information Security Consultant to support governance, compliance, risk management, and cybersecurity initiatives across the organization. The role involves implementing ISO/IEC security standards, guiding regulatory frameworks such as NIS2 and DORA, developing security policies, and delivering awareness programs to strengthen cyber resilience.

Collaborating with business and IT teams, you will provide advisory services and help drive continuous

Qualifications

• Proven hands-on experience implementing security standards and compliance programs.
• Experience delivering security governance, risk management, and cyber awareness initiatives.
• Experience with corporate security projects and regulatory compliance.
• Knowledge of international regulatory frameworks and best practices.

Responsibilities

• Support security governance and compliance initiatives across the organization.
• Lead implementation of security frameworks and regulatory requirements.
• Develop cybersecurity awareness and training campaigns.
• Define and maintain Information Security Policies, Processes, and Procedures.
• Conduct Information Security Risk Assessments and support risk treatment.
• Collaborate with business and technical teams to ensure security requirements are met.
• Provide security consulting and advisory services to internal stakeholders.
• Support continuous improvement of information security governance and compliance programs.

Skills

Information Security Governance

Cybersecurity Risk Management

Security Policies & Procedures

Security Compliance & Auditing

Risk Assessment & Treatment

Cybersecurity Awareness & Training

Tools

ISO 27001

ISO 20000-1

PCI DSS

SOC 1 Type I

SOC 1 Type II

SOC 2 Type I

SOC 2 Type II

NIS2 Directive

DORA

Job description

We are seeking an Information Security Consultant to support security governance, compliance, risk management, and cybersecurity initiatives across the organization. The ideal candidate will have proven experience in implementing internationally recognized security standards and regulatory frameworks, as well as a strong background in information security risk management and cyber awareness programs.

Key Responsibilities

• Support and deliver projects related to Information Security and Cybersecurity .
• Lead and contribute to the implementation of security frameworks, standards, and regulatory requirements.
• Develop and support cybersecurity awareness and training campaigns across the organization.
• Define, review, and maintain Information Security Policies , Processes, and Procedures.
• Conduct Information Security Risk Assessments and support risk treatment initiatives.
• Collaborate with business and technical teams to ensure compliance with security requirements and best practices.
• Provide security consulting and advisory services to internal stakeholders.
• Support continuous improvement of information security governance and compliance programs.

Professional Experience

Proven hands-on experience in the implementation of security standards, frameworks, and compliance programs. Experience working on Information Security and Cybersecurity projects within corporate environments.

Mandatory Technical Skills

• Demonstrated experience implementing and maintaining: ISO 27001
• ISO 20000-1
• PCI DSS
• SOC 1 (Type I and Type II)
• SOC 2 (Type I and Type II)
• Experience with regulatory and compliance frameworks, including: NIS2 Directive
• DORA (Digital Operational Resilience Act)

Core Competencies

• Information Security Governance
• Cybersecurity Risk Management
• Security Policies, Processes, and Procedures Development
• Security Compliance and Auditing
• Risk Assessment and Risk Treatment
• Cybersecurity Awareness and Training
• Security Framework Implementation