IT Control and Risk Specialist

SBM Offshore; Porto; Hybrid; EUR 45,000 - 75,000; Full time

Job summary

SBM Offshore seeks an IT Internal Control and Risk Specialist in Porto to develop control frameworks, assess risks, and improve IT governance. You will collaborate with IT, business units, and external auditors to ensure regulatory compliance and protect financial reporting integrity. Strong leadership and communication are essential.

The role focuses on implementing controls, monitoring risk, and guiding remediation actions in a global energy technology environment. English proficiency required.

Qualifications

• Bachelor's degree in computer science, IT, business admin, or related field is required.
• Certifications such as CISA, CISSP, CRISC, or ITIL are preferred.
• Master's degree in business, IT, or related field is preferred but not mandatory.
• English proficiency is essential for effective communication.

Responsibilities

• Develop and implement IT control frameworks and risk management strategies.
• Conduct risk assessments and monitor internal controls across IT domains.
• Collaborate with IT teams, business units, and auditors to ensure compliance.
• Design, implement, and maintain controls to safeguard IT assets and financial reporting integrity.
• Test and review IT controls; identify deficiencies and drive remediation actions.
• Prepare comprehensive control and risk reports with remediation plans.
• Deliver training on IT controls and risk management to staff.
• Support internal and external IT audits and respond to findings.

Skills

IT risk management

IT controls

Regulatory compliance

Audit support

Leadership

Communication

Analytical thinking

Education

Bachelor's degree in IT/CS/related

Master's degree preferred

CISA/CISSP/CRISC/ITIL preferred

Job description

Select how often (in days) to receive an alert:

Job Family: Cybersecurity Risk Process and Control

Location: Porto, PT, 4100-136

Description:

Imagine your career taking you to the depths of innovation and the heights of impact. Our people enable continuous progress. Their commitment, collective expertise, and unique capabilities are the engine room behind SBM Offshore’s True. Blue. Transition. - shaping the future of energy, and beyond.

About Us:

SBM Offshore is a global leader in deepwater ocean infrastructure, delivering floating production solutions across the full asset lifecycle—from design and construction to installation and operation. Supported by a global team of more than 8,000 professionals, the Company operates a long-term, asset-backed business model that delivers high‑availability assets and predictable cash flows. SBM Offshore combines engineering expertise, operational reliability, and selective innovation to support safe, efficient, and lower‑carbon energy production, while extending its capabilities into new opportunities across the blue economy.

Purpose

• As an IT Internal Control and Risk Specialist, you develop and implement IT control frameworks and risk management strategies. Conduct risk assessments, ensure compliance with regulations, and monitor internal controls. Collaborate with stakeholders to enhance IT security and mitigate risks.

Responsibilities

• Develop and Implement Control Frameworks:
• Lead and participate in the development of IT control frameworks and policies to ensure compliance with regulatory requirements and industry standards.
• Conduct risk assessments and identify areas of improvement in IT processes and systems.
• Design, implement, and maintain internal controls to safeguard IT assets and ensure the integrity of financial reporting.
• Monitor and Evaluate IT Controls:
• Perform regular reviews and testing of IT controls to ensure their effectiveness and adequacy.
• Identify control deficiencies and recommend appropriate remediation actions.
• Monitor IT systems and processes for potential risks and vulnerabilities, and implement corrective measures.
• Collaborate with Stakeholders:
• Work closely with IT teams, business units, and external auditors to ensure alignment of IT controls with business objectives.
• Provide guidance and support to IT and business stakeholders on control-related issues and best practices.
• Collaborate with compliance and risk management teams to ensure integrated risk management across the organization.
• Reporting and Documentation:
• Prepare comprehensive reports on the status of IT controls, including findings, recommendations, and remediation plans.
• Maintain thorough documentation of IT control activities, risk assessments, and audit findings.
• Ensure all control‑related documentation is accurate, up‑date, and accessible.
• Training and Awareness:
• Develop and deliver training programs to increase awareness of IT controls and risk management practices among staff.
• Foster a culture of continuous improvement and proactive risk management within the IT department.
• Support Audit Activities:
• Facilitate internal and external IT audits by providing necessary documentation and support.
• Ensure timely resolution of audit findings and implementation of audit recommendations.
• Act as a liaison between auditors and IT teams to ensure clear communication and efficient audit processes.

Education

• Bachelor’s Degree: A bachelor's degree in computer science, information technology, business administration, or a related field is required.
• Certifications: Relevant certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Risk and Information Systems Control (CRISC), or ITIL (Information Technology Infrastructure Library) are preferred.
• Advanced Degrees: A master's degree in business administration, computer science, or a related field is preferred but not mandatory.
• Language Proficiency: Proficiency in English is essential for effective communication with team members, stakeholders, and external vendors.

Experience

• At least 5 years of experience in IT operations, internal controls, risk management, or a related field.
• Leadership and Managerial Experience: Proven experience in a leadership or managerial role within IT operations or risk management.
• IT Operations and Risk Management: Demonstrated ability to develop and oversee IT control frameworks, policies, and procedures to ensure compliance with regulatory requirements and industry standards.
• Technical Skills: Strong technical background with hands‑on experience in designing, implementing, and managing IT infrastructure, including servers, networks, storage, and cloud environments.
• Regulatory Compliance: Experience with compliance standards and frameworks such as ISO 27001, NIST, and GDPR.
• Audit Support: Proven experience in supporting internal and external IT audits, including preparing documentation and addressing audit findings.
• Analytical and Problem‑Solving Skills: Strong analytical skills and the ability to identify, assess, and mitigate IT risks effectively.
• Communication Skills: Excellent communication and interpersonal skills with the ability to liaise effectively with stakeholders at all levels of the organization.
• Certifications: Relevant certifications such as CISA, CISSP, CRISC, or ITIL are preferred.
• Team Leadership: Strong leadership and team‑building skills, with the ability to mentor and guide technical staff to achieve performance goals and objectives.

Functional Competencies

Compliance Governance, Risk and Control Analytics and reporting Digital savvy Incident Management Internal Audit Delivery Risk Management Technical Data Management

GENERAL INFORMATION

SBM Offshore N.V. is a listed holding company that is headquartered in Amsterdam. It holds direct and indirect interests in other companies that collectively with SBM Offshore N.V. form the SBM Offshore Group (“the Company”). For further information, please visit our website at www.sbmoffshore.com. The companies in which SBM Offshore N.V., directly and indirectly, owns investments are separate entities.

SBM Offshore is proud to be an Equal Employment Opportunity and affirmative Action employer. SBM Offshore does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.