Information Technology Risk Manager

act digital; Porto; Presencial; EUR 90 000 - 130 000; Tempo integral

Resumo da oferta

act digital is seeking an experienced IT Governance & Risk Officer to strengthen IT governance, manage IT risks, and ensure regulatory compliance within a leading financial services organization.

You will collaborate with IT, Security, Risk, Compliance, and senior leadership to drive governance excellence, monitor risk exposure, and align with industry standards and regulatory requirements, including DORA.

Qualificações

• Proven experience in IT governance, risk management, security, audit or compliance.
• Experience in Financial Services, Banking or Insurance sectors.
• Strong understanding of DORA, COBIT, COSO, ISO 31000, ITIL, NIST.
• Proven ability to manage risk registers, controls, audits and remediation plans.

Responsabilidades

• Drive IT governance and compliance by deploying policies, procedures and controls aligned with DORA, COBIT, NIST and ISO standards.
• Manage IT risk processes including risk identification, assessment, monitoring, reporting and remediation tracking.
• Lead governance reporting and support risk committees with dashboards, KPIs and executive presentations.
• Support DORA implementation and oversight, including third-party risk management and regulatory reporting.

Conhecimentos

IT Governance

IT Risk Management

IT Security

Audit

Compliance

Regulatory frameworks

ServiceNow

Microsoft Office

Ferramentas

ServiceNow

Microsoft Office

Descrição da oferta de emprego

We are seeking an experienced IT Governance & Risk Officer to join a leading international organization in the financial services sector. This role will be responsible for strengthening IT governance frameworks, managing IT risks, ensuring regulatory compliance, and supporting the implementation of the Digital Operational Resilience Act (DORA).

Working closely with IT, Security, Risk, Compliance, and senior leadership teams, you will help drive governance excellence, monitor risk exposure, and ensure alignment with industry standards and regulatory requirements.

Key Responsibilities

• Drive IT Governance and Compliance by deploying governance frameworks, policies, procedures, and controls, ensuring alignment with industry standards such as DORA, COBIT, NIST, ITIL, COSO, and ISO 31000.
• Manage IT Risk Processes including risk identification, assessment, monitoring, reporting, incident oversight, risk registers, control campaigns, audit follow-up, and remediation tracking.
• Lead Governance Reporting and Steering Committees by preparing risk dashboards, KPIs, compliance reports, executive presentations, and supporting IT and Cyber Risk committees and governance bodies.
• Support DORA Implementation and Oversight through governance monitoring, third-party risk management, contract reviews, regulatory reporting, and coordination with internal and external stakeholders.

Required Skills & Experience

• Proven experience in IT Governance, IT Risk Management, IT Security, Audit, or Compliance roles.
• Experience within the Financial Services, Banking, or Insurance sectors.
• Strong understanding of governance and risk management frameworks including:
• DORA
• COBIT
• COSO
• ISO 31000
• ITIL
• NIST
• Experience managing risk registers, controls, audits, compliance assessments, and remediation plans.
• Knowledge of IT infrastructure, cybersecurity, and operational risk management.
• Experience with ServiceNow and Microsoft Office tools.
• Strong reporting, documentation, and stakeholder management capabilities.

Language Requirements

• French (C1) – Mandatory
• English (C1) – Strongly Preferred

Soft Skills

• Excellent organizational and communication skills.
• Ability to facilitate meetings and interact with senior stakeholders.
• Strong analytical and problem-solving mindset.
• Results-oriented with a focus on quality and deadlines.
• Ability to work effectively in multicultural and international environments.
• Proactive, adaptable, and detail-oriented professional.

What We Offer

• Opportunity to work in a highly regulated and international environment.
• Exposure to IT governance, cybersecurity, risk management, and regulatory initiatives.
• Visibility with senior leadership and governance committees.
• Long-term career development within a growing technology and risk landscape.