Junior Information Security Analyst (Internal Security)

Decskill; Lisboa; Hybrid; EUR 26,000 - 38,000; Full time

Job summary

Decskill is expanding its Internal Security team and seeks a Junior Information Security Analyst to join a hybrid project. You will work on endpoint, IAM, audits, ISMS documentation, and security monitoring while growing in a supportive, multi-country environment.

The role offers long-term opportunities with international exposure, a emphasis on learning, collaboration across engineers and management, and a culture that values curiosity and commitment.

Qualifications

• Fluent English, written and spoken.
• Structured, detail-oriented work approach.
• Ability to manage documentation and follow-up tasks.
• Strong communication and interpersonal skills across teams.
• Genuine interest in information security and eagerness to learn.
• Exposure to information security via studies, projects or internships.

Responsibilities

• Contribute to endpoint and infrastructure security, ensuring devices and systems are secure and up to date.
• Support identity and access management processes and reviews.
• Assist with certifications and audits by gathering evidence and maintaining records.
• Help develop and maintain ISMS policies, procedures and records.
• Collect and analyze data to provide visibility into security posture.
• Explore emerging security topics, including governance of AI tools.

Skills

Fluent English

Organizational skills

Documentation

Communication

Willingness to learn

Interest in information security

Job description

We are growing. And we are looking for talented people.

At Decskill, we believe that technological excellence is driven by human talent.

We are an IT consulting company with more than 10 years of consolidated experience in the market, focused on building long-term relationships with both our clients and our people. Today, we are a community of over 800 professionals, working from Lisbon, Porto, and Madrid, contributing to impactful technology initiatives.

As part of the Astek Group, we combine a strong local culture with a global presence, being active in around 23 countries across 4 continents. This allows us to offer an international context, diverse challenges, and long-term career opportunities, while staying close to our teams.

We would like to meet a Junior Information Security Analyst (Internal Security) for a project with a hybrid working model:

Key Responsibilities:

As part of the Internal Security team, you will contribute to a variety of activities, including:

• Endpoint and Infrastructure Security: Help ensure that company devices and systems remain properly managed, secure, compliant and up to date, working with endpoint management, patching and network access control solutions.
• Identity and Access Management: Support identity and access management processes, including user access administration and periodic access reviews.
• Compliance, Certifications and Audits: Contribute to the company's security certifications and accreditation initiatives by gathering evidence, maintaining records and supporting audit preparation activities.
• ISMS Processes and Documentation: Assist in developing, reviewing and maintaining information security policies, procedures, guidelines and records.
• Security Monitoring, Visibility and Reporting: Help collect and analyse information to provide visibility into the security posture of company devices, software and network infrastructure.
• Emerging Security Topics: Participate in new security initiatives and explore emerging areas, such as the security and governance of AI tools.

What We're Looking For:

Required Skills & Qualifications:

• Genuine interest in Information Security and cybersecurity, with a strong willingness to learn and develop professionally.
• Fluent English, both written and spoken.
• Good organisational skills and a structured, detail-oriented approach to work.
• Ability to handle documentation, follow up on tasks and ensure information is accurate and up to date.
• Good communication and interpersonal skills, with the ability to collaborate with people across different areas of the company, from engineers to management.
• Some prior knowledge or exposure to Information Security, acquired through academic studies, personal projects, internships or professional experience.

Nice to Have:

• Basic knowledge of IT infrastructure and its management, including Windows and Linux endpoints, networking fundamentals, identity management and directory services.
• Some hands-on experience with endpoint management, network security solutions or cloud productivity platforms.
• Familiarity with information security standards, frameworks and regulations such as:
• ISO/IEC 27001
• IEC 62443
• Cyber Resilience Act (CRA)
• NIS2 Directive
• Basic scripting or automation knowledge.
• An interest in security governance, risk management, compliance and audit processes.

Are you looking for an environment that values curiosity and commitment? Here, your contribution has real impact and individual growth is taken seriously.

Find with us the right opportunity to grow!

What you can expect from us:

• Long-term projects with national and international context
• Opportunities to grow technically and professionally
• A people-first culture, focused on transparency and trust
• Teams that value ownership, collaboration and stability

Your next challenge might start here.

At Decskill, we are committed to equal opportunities and non-discrimination. We promote a culture of diversity and inclusion, where recruitment and career progression are based solely on talent, regardless of age, gender, ethnicity, race, nationality, or any other form of discrimination incompatible with human dignity.