IT Risk & Internal Controls Specialist

act digital; Porto; Híbrido; EUR 45 000 - 65 000; Tempo integral

Resumo da oferta

act digital in Porto, Portugal, is seeking an experienced IT Risk & Internal Controls Specialist for a hybrid role. You will join a team responsible for second-line testing of ICT and operational controls and support risk and compliance initiatives.

The role requires strong analytical skills, knowledge of COSO and security frameworks, and clear English communication across teams. Hybrid work includes in-office days in Porto.

Qualificações

• Experience in Internal Controls and related risk/compliance domains.
• Solid understanding of governance principles and COSO framework.
• Familiarity with recognized standards and regulatory frameworks such as ISO 27001, ISO 22301, NIST CSF, CIS Controls, DORA, NIS2.

Responsabilidades

• Perform design and operating effectiveness testing of ICT and operational controls.
• Review, analyze, and validate control evidence provided by control owners.
• Conduct walkthroughs with first-line teams to understand processes and validate control execution.
• Document testing activities, findings, recommendations, and supporting evidence.
• Prepare control assessment reports and communicate results to stakeholders.
• Support remediation tracking from control testing activities.
• Contribute to maintenance and improvement of the Internal Control Framework.
• Assist in management reports and governance committee materials.
• Collaborate with business and support functions to facilitate testing and assessment activities.
• Promote best practices in governance, risk management, and internal controls.

Conhecimentos

Internal Controls

Internal Audit

Risk Management

Compliance

Information Security

External Audit

COSO

English (Professional)

Descrição da oferta de emprego

We are looking for an experienced IT Risk & Internal Controls Specialist to join a team responsible for executing second-line-of-defense (LOD2) control testing activities across technology and operational environments. You will play a key role in assessing the effectiveness of internal controls, supporting risk and compliance initiatives, and contributing to the continuous improvement of the Internal Control Framework.

Work Model: Hybrid (days per week in the office – Porto)

Key Responsibilities

• Perform design and operating effectiveness testing of key ICT and operational controls.
• Review, analyze, and validate control evidence provided by control owners.
• Conduct walkthroughs with first-line teams to understand processes and validate control execution.
• Document testing activities, findings, recommendations, and supporting evidence.
• Prepare control assessment reports and communicate results to relevant stakeholders.
• Support the follow-up and tracking of remediation actions resulting from control testing activities.
• Contribute to the maintenance and continuous improvement of the Internal Control Framework.
• Assist in the preparation of management reports and governance committee materials.
• Collaborate with business and support functions to facilitate testing and assessment activities.
• Promote best practices in governance, risk management, and internal controls.

Required Skills & Experience

• Experience in Internal Controls, Internal Audit, Risk Management, Compliance, Information Security, or External Audit.
• Solid understanding of internal control frameworks and governance principles, including COSO.
• Experience assessing and testing controls against recognized standards and regulatory frameworks.
• Knowledge of one or more of the following frameworks and regulations: ISO 27001, ISO 22301, NIST Cybersecurity Framework, CIS Controls, DORA, NIS2, or similar.
• Hands-on experience with control testing, evidence review, walkthroughs, and assessment methodologies.
• Experience preparing findings reports, remediation recommendations, and governance documentation.
• Strong analytical and critical-thinking skills.
• Excellent communication and stakeholder management abilities.
• Ability to work independently while collaborating effectively across multiple teams.
• Strong attention to detail and commitment to delivering high-quality assessments.
• Professional proficiency in English.

If you're passionate about IT Risk, Internal Controls, Governance, and helping organizations strengthen their risk and compliance frameworks, we'd love to hear from you.