IT Risk Analyst

Decskill; Portugal; Presencial; EUR 90 000 - 130 000; Tempo integral

Resumo da oferta

Decskill is seeking an IT Risk Analyst to join its Wealth Management practice. You will identify, assess and monitor IT risks across assets, projects and production environments, ensuring alignment with BNP Paribas risk frameworks and controls.

You will report on KRIs and risk indicators while supporting remediation activities. We value extensive experience in IT risk, IT audit, and IT security within financial services, with strong data governance and regulatory awareness.

Qualificações

• Bachelor's degree in IT or equivalent.
• 1
• 2

Responsabilidades

• Identify and assess IT risks within the Wealth Management scope.
• Assess risks according to the BNP Paribas IT Risk Management framework.
• Record, monitor, review, and report identified IT risks.
• Monitor and manage remediation and mitigation actions related to IT risks.
• Accompany projects to ensure IT risk considerations are addressed.
• Analyse and report on operational risk including RCSA, incidents and risk frameworks.
• Produce IT risk reports, indicators, and management information.
• Contribute to adoption of the BNP Paribas IT Risk Group framework within Wealth Management.

Conhecimentos

IT Risk Management

IT Audit

IT Security

Data Governance

Data Protection

SDLC

Risk assessment

KRIs

ServiceNow GRC

Regulatory awareness

Formação académica

Bachelor's Degree in Information Technology

Ferramentas

ServiceNow GRC

Descrição da oferta de emprego

We are growing. And we are looking for talented people.

At Decskill, we believe that technological excellence is driven by human talent.

We are an IT consulting company with more than 10 years of consolidated experience in the market, focused on building long-term relationships with both our clients and our people. Today, we are a community of over 800 professionals, working from Lisbon, Porto, and Madrid, contributing to impactful technology initiatives.

As part of the Astek Group, we combine a strong local culture with a global presence, being active in around 23 countries across 4 continents. This allows us to offer an international context, diverse challenges, and long-term career opportunities, while staying close to our teams.

We would like to meet an IT Risk Analyst!

Responsibilities:

• Identify and assess IT risks arising from existing IT assets, projects, and production environments within the Wealth Management scope.
• Identify potential IT and Cyber risks based on monitoring dashboards and available risk indicators.
• Assess identified risks according to the BNP Paribas IT Risk Management framework.
• Record, monitor, review, and report identified IT risks.
• Monitor and manage remediation and mitigation actions related to identified IT risks.
• Accompany projects to ensure that IT Risk considerations are identified, assessed, and appropriately addressed.
• Analyse and report on operational risk, including RCSA, historical incidents, control plans, IT Risk profiles, and risk identification frameworks.
• Produce IT Risk reports, indicators, and management information.
• Assess operational risks associated with production and project incidents.
• Ensure appropriate assessment of financial, legal, regulatory, and compliance risks related to operational incidents.
• Record operational risk incidents in the relevant risk management tools, ensuring accurate and complete risk analysis data.
• Provide timely and accurate IT Key Risk Indicator (KRI) reporting to management.
• Prepare reporting and information for Internal Control and Management Committees.
• Contribute to the adoption and implementation of the BNP Paribas IT Risk Group framework within Wealth Management.

Requirements:

• Bachelor's Degree in Information Technology or an equivalent qualification.
• 10 to 15 years of relevant professional experience in areas such as IT Risk Management, IT Audit, and/or IT Security.
• Strong practical knowledge and experience in IT Risk Management.
• Previous experience within the Banking or Financial Services industry is highly valued.
• Good knowledge of Information Systems within the Banking industry.
• Knowledge of Cyber Security and Fraud risk.
• Knowledge of Data Governance and Data Protection principles.
• Good understanding of IT System Development Life Cycle (SDLC) processes and methodologies.
• Experience with risk assessment, operational risk management, incident management, and IT controls.
• Knowledge of IT Risk frameworks, RCSA, control plans, risk profiles, and Key Risk Indicators (KRIs).
• Knowledge of ServiceNow GRC or similar Governance, Risk and Compliance tools.
• Strong data analysis skills, with the ability to interpret risk information and produce meaningful reports and indicators.
• Strong analytical and problem-solving skills.
• Strong interpersonal and stakeholder-management skills.
• Risk Management certification, such as ISO 31000, ISACA CRISC, or equivalent.
• Project Management skills and the ability to manage multiple activities and priorities.
• Good knowledge and awareness of regulatory requirements, concepts, trends, and technologies.
• High level of confidentiality, integrity, and attention to detail when handling sensitive information.
• Ability to adapt to specific management requests and changing business needs.
• Ability to work independently while collaborating effectively with different stakeholders.
• Strong written and verbal communication skills.
• Good level of English.

Are you looking for an environment that values curiosity and commitment? Here, your contribution has real impact and individual growth is taken seriously.

Find with us the right opportunity to grow!

What you can expect from us

• Long-term projects with national and international context.
• Opportunities to grow technically and professionally.
• A people-first culture, focused on transparency and trust.
• Teams that value ownership, collaboration and stability.

Your next challenge might start here.

At Decskill, we are committed to equal opportunities and non-discrimination. We promote a culture of diversity and inclusion, where recruitment and career progression are based solely on talent, regardless of age, gender, ethnicity, race, nationality, or any other form of discrimination incompatible with human dignity.