ISMS & Regulatory Compliance Consultant

Roboyo Group; Porto; In loco; EUR 60.000 - 90.000; Tempo pieno

Descrizione del lavoro

Roboyo Porto is seeking an Information Security & Compliance Consultant to manage client projects focused on information security, cybersecurity, data protection and regulatory compliance. The role involves ISO/IEC 27001 ISMS delivery and ongoing improvement, with emphasis on regulatory frameworks including NIS2, DORA and GDPR.

The consultant will own a portfolio of clients, support certification processes, coordinate audits, and contribute to governance, risk management, and supplier security

Competenze

• ISO/IEC 27001 ISMS implementation experience.
• Knowledge of ISO/IEC 27001:2022 requirements.
• Experience with NIS2 regulatory governance.
• GDPR/data protection principles understanding.
• DORA ICT risk/compliance knowledge.
• Experience preparing for internal, certification or surveillance audits.

Mansioni

• Lead ISO/IEC 27001 ISMS implementation, maintenance and improvement for clients.
• Perform ISO 27001 gap and readiness assessments throughout certification cycles.
• Assist organisations with NIS2 governance and cybersecurity measures.
• Support DORA compliance incl. ICT risk management and resilience.
• Provide GDPR/data protection advisory services and risk assessments.
• Develop policies, risk registers and evidence for compliance.
• Coordinate ISO 27001 audits with customers, auditors and partners.
• Engage with customers to identify risks and remediation plans.
• Contribute to commercial activities and proposal preparation.

Conoscenze

Customer-facing

Stakeholder management

Regulatory awareness

Audit readiness

Formazione

Higher education in Information Security

Descrizione del lavoro

Roboyo Porto is seeking an Information Security & Compliance Consultant to manage client projects focused on information security, cybersecurity, data protection and regulatory compliance. The role involves ISO/IEC 27001 ISMS delivery and ongoing improvement, with emphasis on regulatory frameworks including NIS2, DORA and GDPR.

The consultant will own a portfolio of clients, support certification processes, coordinate audits, and contribute to governance, risk management, and supplier security