Information Security Technician (SGSI)

Contisystems; Cascais; Teletrabalho; EUR 30 000 - 48 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Meal allowance

Health insurance

Benefits programme

Mental health platform

Resumo da oferta

CONTISYSTEMS in the Lisbon area seeks an Information Security Technician (SGSI) to help implement and maintain an ISMS, manage SoA, oversee ISO 27001 controls, and support audits and risk management efforts.

You will contribute to governance, risk, and compliance activities, preparing documentation and reports while coordinating with clients and suppliers. Fluency in Portuguese and English is required.

Qualificações

• Bachelor's degree in a related field.
• Solid knowledge of ISO/IEC 27001:2022 and ISO/IEC 27002:2022.
• Experience in information security risk management.
• Knowledge of GDPR and NIS 2.
• Ability to prepare technical documentation and reports.

Responsabilidades

• Maintain and update ISMS documentation (policies, procedures, records).
• Manage the SoA and ISO 27001 controls.
• Conduct risk management and monitor remediation plans.
• Prepare for and monitor internal/external audits.
• Support management reviews with indicators and reports.
• Evaluate suppliers and security questionnaires.
• Support security incidents and awareness initiatives.
• Ensure GDPR/NIS2 compliance.
• Consulting: participate in maturity/compliance assessments.
• Prepare compliance documentation for clients.
• Support certification processes and demonstrations of compliance.

Conhecimentos

Risk management

GDPR & NIS2 knowledge

MS Word

MS Excel

Portuguese & English

Attention to detail

Communication skills

Travel willingness

Security documentation

Formação académica

Bachelor's degree in Computer Engineering/Information Security/IS Management

Ferramentas

ISO 27001/27002 knowledge

Descrição da oferta de emprego

At CONTISYSTEMS, we value people who are passionate about challenges, innovation, and results. We are looking to strengthen our team with an Information Security Technician (SGSI).

Main responsibilities:

SGSI Management

• Maintain and update ISMS documentation (policies, procedures, and records).
• Manage the Statement of Applicability (SoA) and ISO 27001 controls.
• Conduct risk management processes and monitor remediation plans.
• Prepare for and monitor internal and external audits.
• Support management reviews by monitoring indicators and providing reports.
• Evaluate suppliers and complete customer security questionnaires.
• Support the management of security incidents and awareness-raising efforts.
• Ensure compliance with legal and regulatory requirements (GDPR, NIS2, among others).

Consulting

• Participate in maturity and compliance assessments.
• Prepare compliance documentation for clients.
• Support certification processes and the demonstration of compliance.

Desired profile:

• Bachelor's degree in Computer Engineering, Information Security, Information Systems Management, or a related field.
• Solid knowledge of ISO/IEC 27001:2022 and ISO/IEC 27002:2022.
• Experience in information security risk management.
• Knowledge of the GDPR and NIS 2.
• Ability to prepare technical documentation and reports.
• Advanced proficiency in Microsoft Word and Excel.
• Good knowledge of Portuguese and English.
• Organization, independence, attention to detail, and strong communication skills.
• Willingness to travel occasionally

We value:

• 2 to 3 years of experience in information security, auditing, compliance, or consulting.
• ISO 27001, ISO 27005, CISM, CISA, or equivalent certifications.

We offer:

• Base Salary + Meal Allowance;
• Health Insurance;
• Access to various benefits and partnerships;
• Mental Health Without Limits — a platform offering free and unlimited consultations;
• Opportunity to join a structured team at a leading company in the industry.

Join CONTISYSTEMS and help foster a culture of safety, innovation, and excellence.