IT RISK

Closer Consulting; Porto; Híbrido; EUR 50 000 - 70 000; Tempo integral

Resumo da oferta

Closer Consulting, a Data Science company, seeks an IT Risks & Governance Specialist for a hybrid role in Porto. You will implement governance frameworks, monitor compliance, and coordinate risk oversight with CIOs and local teams.

Responsibilities include DORA deployment, risk registers, and quarterly steering committees, with an emphasis on service delivery in the financial services sector. English required; travel may be involved.

Qualificações

• Background in Financial Services or Insurance sectors is preferred.
• Strong practical knowledge of IT governance and risk methodologies.
• Experience deploying regulatory frameworks and risk controls.

Responsabilidades

• Deploy and document global IT governance frameworks with full documentation.
• Support local adaptation of governance rules and refine procedures.
• Monitor compliance against group standards and track remediation plans.
• Prepare quarterly IT Steering Committees and organize risk reviews.
• Maintain IT risk register, incidents tracking, and audit recommendations.
• Lead DORA deployment, vendor contract reviews, and reporting to management.
• Produce high-quality risk governance reporting for stakeholders.

Conhecimentos

IT Governance

Risk Management

DORA

NIST

ISO 31000

COBIT

COSO

ITIL

Ferramentas

ServiceNow

Advanced MS Office

Descrição da oferta de emprego

Mutual Respect, Empathy, Innovation, and Professional Pride. Do you see yourself within these values?

Founded in 2006 with the mission "To Challenge Complexity", Closer Consulting is a Data Science company specializing in Business Intelligence, Advanced Analytics, and Artificial Intelligence.

Developing projects in the most diverse industries – Banking, Telecommunications, Healthcare, Retail, Energy, Insurance, and Aviation, among others –, we have created an environment where the brightest enquiring minds feel at home, providing our people with the means, opportunities and support they need to thrive and innovate.

We are seeking a skilled IT Risks & Governance Specialist to take on new challenges in a hybrid work model in Porto.

Key Responsibilities

1. IT Governance Implementation & Oversight

• Deploy and break down global IT governance frameworks (procedures, rules, controls, and requirements), ensuring full documentation.
• Support IT managers and operational teams in adapting governance rules to the local entity context, identifying key controls, and refining procedures.
• Monitor compliance levels against Group standards and track remediation plans for any non-compliance.
• Assist the CIO in organizing and preparing quarterly IT Steering Committees.
• Maintain and update procedures to align with evolving organizational governance.
• Promote an IT risk culture across the organization and maintain the central IT risk register.
• Ensure regular review of IT risks and manage risk tracking sheets within ServiceNow.
• Manage control campaigns (e.g., annual GKSP BI), monitor action plans, and track operational incidents.
• Feed IT-related risk inputs into broader frameworks (e.g., ORSA, RCSA) and establish Key Risk Indicators (KRIs) where required.
• Maintain an active inventory of Shadow IT and oversee IT audit recommendations.
• Organize and present quarterly IT Risk & Cyber Committees covering KPIs, internal audit recommendations, obsolescence, incident history, and outsourcing risks.

3. DORA Governance & Regulatory Deployment

• Lead the monitoring, deployment, and local reporting required under the DORA (Digital Operational Resilience Act) framework.
• Conduct reviews of intragroup and third-party vendor contracts to guarantee DORA compliance clauses.
• Establish and lead DORA steering committees alongside internal entities and subcontractors.

4. Reporting & Stakeholder Management

• Produce high-quality reporting on IT risks and governance for local management, business units, and corporate headquarters.
• Act as the primary liaison between local teams and centralized corporate governance functions.
• Consolidate and manage the remediation portfolio for identified IT risks, obsolescence, and non-compliance issues.

Technical & Professional Expertise

• Domain Experience: Background in the Financial Services or Insurance sectors.
• Frameworks & Standards: Strong practical knowledge of IT governance and risk methodologies (e.g., DORA, NIST, ISO 31000, COBIT, COSO, ITIL).
• Tools: Proficiency in ServiceNow (for risk and control management) and Advanced MS Office (Excel, PowerPoint).

Languages

• English: C1 Level / Fluent (Highly Valuable).

Additional Requirements

• Travel: Willingness and flexibility to travel both within Portugal and internationally as required.

Closer is a company that values diversity and inclusion. We are committed to fostering an environment where everyone is treated with dignity and respect, regardless of race, gender, beliefs, sexual orientation, physical or mental disability, or other personal characteristics.

At Closer, we embrace the unique perspectives and experiences that everyone brings, and we believe that it is a fundamental driver for the success we've achieved.