IT Risk Analyst - Banking Sector

act digital EMEA - Alter Solutions; Lisboa; On-site; EUR 90,000 - 130,000; Full time

Job summary

Alter Solutions is seeking a Senior IT Risk Analyst to join a banking environment in Lisbon, supporting IT risk governance, risk assessment and remediation across a complex IT landscape. You will work with Business, IT, Cybersecurity, Risk, Compliance and other stakeholders to identify, assess and mitigate IT risks, ensure alignment with risk frameworks, and contribute to RCSA, KRIs and risk reporting.

The role requires 10–15 years in IT risk management, a Bachelor's in IT, and fluent English;

Qualifications

• Bachelor's degree in Information Technology or a related field.
• 10–15 years of relevant experience in IT Risk Management, IT Audit and/or IT Security.
• Experience in the banking or financial services industry, ideally in an IT Risk Management role.
• Knowledge of cybersecurity, fraud, data governance and data protection.
• Familiarity with IT system development lifecycle (SDLC) processes and methodologies.
• Experience with ServiceNow GRC or similar Governance, Risk and Compliance tools.
• Strong analytical skills, including data analysis, risk assessment and impact evaluation.
• Excellent communication and stakeholder management skills.
• Fluent English, both written and spoken.

Responsibilities

• Identify and assess IT and cybersecurity risks related to IT assets, projects and production environments.
• Conduct IT risk analyses, define remediation plans and monitor corrective actions through to completion.
• Maintain IT risk registers and ensure accurate risk information is recorded in GRC tools.
• Assess operational risk incidents, including their potential financial, legal, regulatory and compliance impact.
• Contribute to RCSA activities, control plans, historical incident analysis and IT risk profiling.
• Prepare IT risk reports, Key Risk Indicators (KRIs), dashboards and presentations for management and risk committees.
• Support IT Risk, Continuity and Security governance, including policies and procedures related to Cloud project governance.
• Collaborate with cross-functional teams to strengthen risk management practices and internal controls.

Skills

IT Risk Management

IT Audit

IT Security

Risk assessment

Stakeholder management

Data protection

Cybersecurity

Risk reporting

Education

Bachelor's degree in Information Technology or related field

Tools

ServiceNow GRC

Job description

Are you an experienced IT Risk professional looking for your next challenge in the banking and financial services sector?

We're looking for a Senior IT Risk Analyst to join a banking environment, supporting IT risk governance, operational risk assessment and remediation activities across a complex IT landscape.

In this role, you will work closely with Business, IT, Cybersecurity, Risk, Compliance and other stakeholders to identify, assess and mitigate IT risks, ensuring alignment with established risk management frameworks.

• Identify and assess IT and cybersecurity risks related to IT assets, projects and production environments.
• Conduct IT risk analyses, define remediation plans and monitor corrective actions through to completion.
• Maintain IT risk registers and ensure accurate risk information is recorded in GRC tools.
• Assess operational risk incidents, including their potential financial, legal, regulatory and compliance impact.
• Contribute to RCSA activities, control plans, historical incident analysis and IT risk profiling.
• Prepare IT risk reports, Key Risk Indicators (KRIs), dashboards and presentations for management and risk committees.
• Support IT Risk, Continuity and Security governance, including policies and procedures related to Cloud project governance.
• Collaborate with cross-functional teams to strengthen risk management practices and internal controls.

What We're Looking For

• A Bachelor's degree in Information Technology or a related field, or equivalent qualifications.
• 10–15 years of relevant experience in IT Risk Management, IT Audit and/or IT Security.
• Strong practical knowledge of IT Risk Management and risk assessment methodologies.
• Experience in the banking or financial services industry, ideally in an IT Risk Management role.
• Knowledge of cybersecurity, fraud, data governance and data protection.
• Familiarity with IT system development lifecycle (SDLC) processes and methodologies.
• Experience with ServiceNow GRC or similar Governance, Risk and Compliance tools.
• Strong analytical skills, including data analysis, risk assessment and impact evaluation.
• Excellent communication and stakeholder management skills.
• Fluent English, both written and spoken.

Nice to Have

• Risk management certifications, such as ISO 31000 or ISACA CRISC.
• Experience with operational risk incidents, RCSA, control testing and remediation management.