ISMS & Compliance Assurance Lead

Aceve; Braga; In loco; EUR 50.000 - 80.000; Tempo pieno

Descrizione del lavoro

Aceve is seeking a Security Governance professional to own and evolve the ISMS framework, ensure evidence integrity, and drive audit readiness across acquisitions and entities. You will translate security requirements into repeatable processes, coach teams on compliance, and coordinate internal and external audits to protect customer trust.

The role emphasizes hands-on ISO 27001 management, NIS2 awareness, and practical risk-based controls with a pragmatic approach to evidence and continual

Competenze

• Hands-on experience running or auditing an ISO 27001 management system, including evidence, nonconformities, corrective action and audits.
• Solid grasp of quality management principles: PDCA, process approach and continual improvement.
• Experience with NIS2 and cyber resilience concepts is advantageous.

Mansioni

• Drive the policy review cycle and keep governing documents controlled and accessible
• Own the compliance evidence base and control monitoring
• Translate requirements into ways of working and advise teams on meeting ISO 27001, NIS2 and Cyber Resilience Act
• Keep one management system by mapping overlapping requirements into a single control set
• Coach through nonconformities, from logging to verified closure
• Run internal audits and process sampling and report findings quarterly
• Coordinate external audits and prepare teams to explain processes with confidence
• Bring acquired companies into the ISMS and align their practices
• Own customer security assurance and respond to questionnaires with evidence-backed inputs
• Follow our posture for ISO 27001, NIS2, Cyber Resilience Act and ISAE 3402 reports
• Use audit results to drive improvements and present to Steering Committee and ELT

Conoscenze

ISO 27001 auditing

risk assessment

root-cause analysis

compliance coaching

clear writing

Formazione

Degree in information security or related field

Descrizione del lavoro

Aceve is seeking a Security Governance professional to own and evolve the ISMS framework, ensure evidence integrity, and drive audit readiness across acquisitions and entities. You will translate security requirements into repeatable processes, coach teams on compliance, and coordinate internal and external audits to protect customer trust.

The role emphasizes hands-on ISO 27001 management, NIS2 awareness, and practical risk-based controls with a pragmatic approach to evidence and continual