IT Risk Analyst

Syone; Lisboa; Presencial; EUR 70 000 - 100 000; Tempo integral

Resumo da oferta

Syone is seeking an experienced IT Risk Management professional to assess risks across IT assets and projects within a banking environment. You will collaborate with Business, IT, Security and Legal teams to document risks and remediation plans, and ensure alignment with the client’s risk framework.

The role involves producing risk analyses, maintaining risk registers and dashboards, and delivering governance-level reporting to management and committees. fluency in English is required.

Qualificações

• 10–15 years of IT Risk Management, IT Audit or IT Security experience in Banking/Financial services.
• Knowledge of regulatory requirements and risk reporting in a financial context.
• Experience in risk assessment, remediation planning and risk governance processes.

Responsabilidades

• Identify and assess IT risks across assets and projects in collaboration with stakeholders.
• Produce IT risk analyses, remediation plans and monitor progress per risk framework.
• Integrate IT risks into the IT GRC tool and monitor risk indicators.
• Report operational and IT risk metrics to management and committees.

Conhecimentos

IT Risk Management

Banking IT knowledge

Cyber Security

Data Governance

SDLC knowledge

Analytical skills

Data analysis

ServiceNow GRC

English communication

Formação académica

Bachelor’s Degree in Information Technology

Ferramentas

ServiceNow GRC tool

Descrição da oferta de emprego

• Identify and assess risks under the client's scope arising from existing IT assets, projects or production environment in collaboration with all stakeholders (Business, IT Domain, IT Architects, Security Architects, Third Party Risk Management, Data Office, Vendor Management, RISK functions, Legal, Compliance, etc.).
• Produce IT risk analysis for each identified risk, identify remediation plans, and monitor and coordinate their progress according to client's risk management framework.
• Integrate IT risks into the IT GRC (Governance-Risk-Compliance) tool.
• Identify potential IT & Cyber risk inherent in the activity based on WMIS monitoring dashboards.
• Monitor and manage remediation for mitigation in recorded in IT Risk register.
• Analyze or report on operational risk (RCSA, Historical Incident, Control Plans, IT Risk profiles, Risk ID frameworks)
• Produce IT Risk reporting and indicators
• Assess operational risk associated with production and project incidents.
• Ensure proper assessment of financial, legal, regulatory and compliance risks
• Record operational risk incident in risk tool with proper data of risk analysis

Others ;

• Timely and accurate IT Key Risk indicator reporting to the management
• Provide reporting for Internal Control and Management committee
• Produce dashboards and presentations for the client's management and for the IT Risk, Continuity & Security committees of the department.
• To maintain policies and procedures in line with the Cloud project governance process.
• Assister in the use of collaborative tools (SharePoint, Teams, etc.).

Technical skills:

• Strong knowledge of IT Risk Management with practical exposure
• Knowledge of Information Systems in Banking industry
• Knowledge of Cyber Security and Fraud
• Knowledge of Data Governance and Protection
• Familiar with IT System Development Life Cycle process and methodology
• Strong interpersonal and analytical skills
• Strong skill in data analysis
• Knowledge of ServiceNow GRC tool
• Strong English communication skills in both written and verbal

Other Value-added Competencies :

• High regard for confidentiality and integrity of all confidential information
• Familiar with regulatory requirements, concepts, trends and technologies
• Adaptability to handle specific management requests

Specific Qualifications

• Bachelor’s Degree in Information Technology or equivalent qualification, with 10 to 15 years of relevant experience in areas including but not limited to IT Risk Management, IT Audit and/or IT Security
• Preference will be given to candidate with prior experience in IT Risk Management role in Banking Industry

Language Skills:

By applying, you accept our GDPR policies. Your personal data in your CV and documents will be used solely for processing your application at SYONE. SYONE, S.A. (NIPC 504729624) is the data controller, located at Rua Alfredo da Silva, 8-A, Edifício Stern, Piso 3D, 2610-016 Amadora. We will use your data to tailor your application to relevant vacancies and for potential employment contracts. If selected, your data will be kept during your employment and for at least two years after. If not selected, your data will be kept for two years for future vacancies and then deleted, except for your contact details. You can exercise your rights (access, rectification, erasure, etc.) by emailing [e-mail]. Your data may be shared with our HR service providers and will be stored securely. You can withdraw your consent at any time. We will not use your data for other purposes without your express consent. For more information, email [e-mail].