IT Security Specialist GRC

Match Profiler; Porto; Hybrid; EUR 40,000 - 60,000; Full time

Benefits offered by this job

Personalized support from the team

Exclusive discounts with partners

Celebration of victories

Constant feedback on work

Access to social events

Job summary

A leading IT consultancy in Porto is seeking an IT Security Specialist with strong GRC experience. This full-time role requires a bachelor's degree in cybersecurity and over 3 years of professional experience. Responsibilities include supporting the ISO with security strategies, monitoring risks, and ensuring compliance. The position offers personalized team support, performance feedback, and access to a vast network of partnerships for exclusive benefits.

Qualifications

• 3+ years of experience in Information Security GRC.
• Strong knowledge of security frameworks such as ISO 27001, NIST.
• Experience with risk management tools, compliance platforms.

Responsibilities

• Assist the ISO in implementing information and cyber security strategies.
• Support developing risk management methodologies aligned with company policies.
• Monitor cybersecurity risks and evaluate control implementation.

Skills

Information Security GRC

Security frameworks (ISO 27001, NIST)

Risk management tools

Security auditing

Cloud security

Networking security

Good communication

Team spirit

Proactivity

Time management

Education

Bachelor’s degree in Cybersecurity, IT or related field

Job description

Match Profiler is an Information Systems consultant who has been working in the national and international market since 1999. We have multidisciplinary skills and IT know-how that allow us to contribute, optimize and progress with our clients. We are currently recruiting, for integration in our internal team/client, professionals with the following profile:

IT Security Specialist GRC - Hybrid (Porto - 2 days/week)

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field
• 3+ years of experience in Information Security GRC
• Strong knowledge of security frameworks (e.g., ISO 27001, ISO27005, NIST, IEC 62443)
• Familiarity with regulatory requirements such as GDPR, NIS2, etc.
• Experience with risk management tools, compliance platforms, and security monitoring solutions
• Experience conducting security audits and risk assessments
• Understanding of IT security principles, cloud security, and network security
• Availability to travel, mainly in Europe

Responsibilities

• Assist the ISO in implementing the information and cyber security strategy and program
• Support the development and implementation of a risk management methodology aligned with company strategy and policies
• Ensure alignment between information and cyber security risk management and the company risk management framework
• Provide guidance and support on information and cyber security risk management activities
• Assess the effectiveness of security controls in IT and OT environments
• Monitor information and cyber security risks by evaluating control implementation, asset vulnerabilities, threat landscapes, and security incidents
• Report risk trends to Risk Owners and other relevant committees
• Develop and maintain security documentation, including standards, processes, procedures, guidelines, contractual clauses, and control catalogs
• Design and maintain an unified IT and OT security architecture aligned with the overall security strategy
• Establish a security architecture repository: principles, terminology, security services, control frameworks, and reference models
• Support first‑line teams in identifying and addressing cyber security risks and requirements in new products, projects, processes, and services
• Develop and implement security education, training, and awareness programs to foster security‑conscious behaviors across IT and OT environments
• Provide evidence of risk oversight and control implementation for internal and external audits
• Communicate the status and progress of the security program to key stakeholders
• Monitor compliance with security architecture and standards
• Collect and analyze key performance and effectiveness metrics to support decision‑making and inform the ISO
• Good communication
• Team spirit
• Proactivity
• Time management

What we can offer

• Personalized support from your team
• Your manager will take into consideration your motivations and suggestions
• Victories will be celebrated together
• Your HR and Support Teams will always be available to help
• Constant feedback on your work
• A network of hundreds of partnerships with companies from numerous sectors that offer you exclusive discounts (health, well‑being, travel, gastronomy, culture, leisure, training, etc.)
• And, of course, many gatherings and social events

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Information Technology

Industries

Software Development