It Risk Analyst

Decskill; Setúbal; Presencial; EUR 60 000 - 90 000; Tempo integral

Resumo da oferta

Decskill is seeking an IT Risk Analyst to join our growing IT consulting team in a multinational context. You will assess IT and cyber risks across assets, projects, and production environments, and report findings to stakeholders.

The ideal candidate has 10–15 years in IT Risk Management, IT Audit or IT Security, with banking sector experience, familiarity with SDLC, data governance and CRISC/ISO31000 certifications, and strong English communication skills.

Qualificações

• Bachelor's Degree in Information Technology or equivalent qualification.
• 10–15 years of relevant professional experience in IT Risk Management, IT Audit and/or IT Security.
• Strong practical knowledge of IT Risk Management.
• Knowledge of information systems within the Banking industry.
• Knowledge of Cyber Security and Fraud.
• Familiarity with IT System Development Life Cycle (SDLC) processes and methodologies.
• Strong data analysis skills.
• Strong English communication skills.

Responsabilidades

• Perform IT risk assessments within the assigned scope across IT assets, projects and production environments.
• Identify IT and Cyber risks based on monitoring dashboards and activity analysis.
• Assess risks according to the applicable IT Risk Management framework.
• Record, monitor, review and report identified risks.
• Monitor and manage risk remediation and mitigation actions.
• Support projects to ensure IT Risk is properly identified, addressed and treated.
• Produce IT Risk reporting and indicators.
• Provide timely IT Key Risk Indicator (KRI) reporting to management.

Conhecimentos

IT Risk Management

IT Audit

IT Security

Data Governance

Data Protection

SDLC Knowledge

Analytical Skills

English Proficiency

Formação académica

Bachelor's Degree in Information Technology

IT Risk Management Certification (ISO 31000 / CRISC)

Ferramentas

ServiceNow GRC

Descrição da oferta de emprego

We are growing. And we are looking for talented people.

At Decskill, we believe that technological excellence is driven by human talent.

We are an IT consulting company with more than 10 years of consolidated experience in the market, focused on building long-term relationships with both our clients and our people. Today, we are a community of over 800 professionals, working from Lisbon, Porto, and Madrid, contributing to impactful technology initiatives.

As part of the Astek Group, we combine a strong local culture with a global presence, being active in around 23 countries across 4 continents. This allows us to offer an international context, diverse challenges, and long-term career opportunities, while staying close to our teams.

We would like to meet an IT Risk Analyst!

Responsibilities:

• Perform IT Risk assessments within the assigned scope, covering existing IT assets, projects, and production environments.
• Identify potential IT and Cyber risks based on monitoring dashboards and activity analysis.
• Assess identified risks according to the applicable IT Risk Management framework.
• Record, monitor, review, and report identified risks.
• Monitor and manage risk remediation and mitigation actions.
• Support projects in ensuring that IT Risk is properly identified, addressed, and treated.
• Analyze and report on operational risk, including RCSA, historical incidents, control plans, IT Risk profiles, and Risk ID frameworks.
• Produce IT Risk reporting and indicators.
• Assess operational risks associated with production and project incidents.
• Ensure the appropriate assessment of financial, legal, regulatory, and compliance risks.
• Record operational risk incidents in the relevant risk management tool, ensuring accurate risk analysis information.
• Provide timely and accurate IT Key Risk Indicator (KRI) reporting to management.
• Prepare reporting for Internal Control and Management Committees.
• Support the adoption of the organization's IT Risk Management framework within the assigned scope.
• Maintain a high level of confidentiality and integrity when handling sensitive information.

Requirements:

• Bachelor's Degree in Information Technology or equivalent qualification.
• 10 to 15 years of relevant professional experience in areas including IT Risk Management, IT Audit, and/or IT Security.
• Strong practical knowledge of IT Risk Management.
• Knowledge of Information Systems within the Banking industry.
• Knowledge of Cyber Security and Fraud.
• Knowledge of Data Governance and Data Protection.
• Familiarity with IT System Development Life Cycle (SDLC) processes and methodologies.
• Strong data analysis skills.
• Strong analytical and interpersonal skills.
• Knowledge of ServiceNow GRC.
• Risk Management certification such as ISO 31000, ISACA CRISC, or equivalent.
• Previous experience in an IT Risk Management role within the Banking industry is valued.
• Project Management skills.
• Familiarity with regulatory requirements, concepts, trends, and technologies.
• Strong adaptability and ability to respond to specific management requests.
• Excellent confidentiality and integrity when handling confidential information.
• Strong English communication skills, both written and verbal.

Are you looking for an environment that values curiosity and commitment? Here, your contribution has real impact and individual growth is taken seriously.

Find with us the right opportunity to grow!

What you can expect from us

• Long-term projects with national and international context.
• Opportunities to grow technically and professionally.
• A people-first culture, focused on transparency and trust.
• Teams that value ownership, collaboration and stability.
• An international and multicultural working environment.
• Opportunities to work on IT Risk Management, Cyber Security, Data Governance, and regulatory compliance initiatives.

At Decskill, we are committed to equal opportunities and non-discrimination. We promote a culture of diversity and inclusion, where recruitment and career progression are based solely on talent, regardless of age, gender, ethnicity, race, nationality, or any other form of discrimination incompatible with human dignity.