IT Risk Analyst (with French)

act digital EMEA - Alter Solutions; Porto; Presencial; EUR 45 000 - 65 000; Tempo integral

Resumo da oferta

A leading international banking group is seeking an experienced IT Risk Analyst to oversee cybersecurity governance, operational risk supervision, and regulatory compliance. The role involves identifying and analyzing operational risks, supporting control activities, and delivering consolidated risk reporting to senior stakeholders. Candidates must have over 3 years of experience in IT risk management, knowledge of risk frameworks like ISO 27001, and fluency in English and French. This position offers a dynamic work environment in Porto.

Qualificações

• 3+ years of experience in IT Risk, Cyber Risk, or IT Controls.
• Strong knowledge of risk management frameworks like ISO 27001.
• Experience in controlled validation and remediation.

Responsabilidades

• Identify and analyze operational and cyber risks across IT Payment Services.
• Execute permanent control activities.
• Contribute to RCSA inputs and risk landscape updates.

Conhecimentos

IT Risk / Cyber Risk / IT Controls / GRC

Risk management frameworks

Control validation and remediation

Fluency in English

Fluency in French

Ferramentas

GRC tools

Descrição da oferta de emprego

We are currently looking for an IT Risk Analyst to join a leading international banking group within the Cybersecurity & Digital Fraud domain.

This role offers strong exposure to cybersecurity governance, operational risk supervision, and regulatory compliance within critical payment services environments.

Your Mission:

• Identifying and analysing operational and cyber risks across IT Payment Services
• Executing and supporting permanent control activities (ICT and non-ICT risks)
• Contributing to RCSA inputs and risk landscape updates
• Performing root cause analysis and impact assessments
• Monitoring remediation plans and validating corrective actions
• Supporting audits and third-party risk analysis
• Delivering consolidated risk reporting to senior stakeholders (CISO / ITRO / ICRO)

What We’re Looking For:

• +3 years of experience in IT Risk / Cyber Risk / IT Controls / GRC
• Strong knowledge of risk management frameworks (e.g., ISO 27001, NIST, PCI-DSS)
• Experience in control validation and remediation follow-up
• Exposure to regulated environments (Banking, Financial Services, Payments)
• Experience with GRC tools (e.g., ServiceNow) is a plus
• Fluency in English and French are mandatory

Nice to Have:

• Exposure to DORA or payment-related regulatory frameworks
• Experience working with RCSA methodologies
• Experience in highly critical transaction-based systems