Information Security Risk Analyst M/F

Crédit Agricole Group; Lisboa; Presencial; EUR 40 000 - 70 000; Tempo integral

Resumo da oferta

A leading financial services group in Lisbon seeks a cybersecurity professional responsible for conducting security risk analyses and ensuring compliance with various regulations. Key responsibilities include participating in project planning, responding to audit requests, and managing IT risks. The ideal candidate will have experience in cybersecurity frameworks and be adept at liaising with internal and external stakeholders to enhance the organization's security posture.

Responsabilidades

• Conduct security risk analyses on IT projects ensuring compliance with policies.
• Participate in planning phases, assessing security impacts and proposing controls.
• Respond to audit requests with evidence and documentation of controls applied.
• Monitor and validate vulnerability remediation actions with other teams.
• Participate in incident response and root cause investigations.

Descrição da oferta de emprego

Responsibilities

• Conducting security risk analyses on IT projects and initiatives, ensuring compliance with policies, internal standards, and reference frameworks (ISO 27001, NIST, DORA, GDPR).
• Participating in the planning and design phases of solutions, assessing security impacts and proposing mitigating controls. Direct involvement with project, architecture, development, infrastructure and business representative teams to gather the information necessary for risk assessment.
• Validation of security requirements in procurement and onboarding of third parties.
• Conducting phishing simulations and awareness campaigns.
• Responding to audit requests (internal, external, supervisors) with evidence, justifications and documentation of controls applied. Technical implementation of security controls.
• Identification, monitoring and validation of vulnerability remediation actions, in coordination with other teams.
• Cybersecurity maintenance using monitoring platforms. Monitoring and investigation of cybersecurity alerts.
• Participation in incident response: root cause investigation, containment, eradication and forensics support.
• Support for the secure development cycle, penetration testing, vulnerability identification and security architecture review.
• Regular review of access control policies and user privileges.

Additional Responsibilities

• Monitoring action plans to ensure compliance and alignment with standards and regulations.
• Creating reports and dashboards for technical and non-technical audiences within their areas of intervention.
• Management of the SOC service.
• Acting as a liaison with other company structures on issues related to cybersecurity and IT risk.
• Liaising with the Credit Agricole group on cybersecurity and IT risk issues.
• Developing communication and awareness plans on IT risks and cybersecurity.
• Developing, implementing and maintaining the cyber and IT risk management framework in line with best practices and the group.
• Identifying, assessing and prioritising cyber and IT risks in assets, processes, systems and suppliers.
• Defining and monitoring IT risk and cybersecurity treatment plans.