Lisbon IT Risk & Security Leader

Chain IQ; Lisboa; On-site; EUR 50,000 - 80,000; Full time

Job summary

Chain IQ is hiring an IT Risk & Security Specialist to identify and mitigate technology and information security risks across the organization. You will collaborate with IT, Security, Legal, Risk, Procurement, and business stakeholders to embed security into processes and contracts.

The role strengthens security posture while enabling growth and resilience, including handling audits, third-party assessments, and security documentation reviews with a global team.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Risk Management, or related field.
• Minimum 3 years of IT Risk, Information Security, Cybersecurity, GRC, or similar experience.
• Familiarity with ISO 27001, ISO 27002, and SOC 2 frameworks.
• Experience with IT risk assessments, control reviews, and remediation tracking.
• Knowledge of third-party risk management and supplier security assessments.
• Experience reviewing security requirements in client contracts or due diligence processes is a plus.
• Familiarity with NIST CSF, CIS Controls, or similar standards.

Responsibilities

• Identify, assess, document, and monitor IT and information security risks, including remediation plans and exceptions.
• Support development and maintenance of information security policies, standards, and controls.
• Perform IT risk and security control assessments and track remediation activities.
• Monitor and report security and risk metrics (KRIs/KPIs) to stakeholders.
• Support audits, certifications, and compliance assessments with evidence collection and remediation follow-up.
• Ensure security requirements are integrated into projects and processes throughout their lifecycle.
• Conduct third-party security assessments and evaluate suppliers' security posture.
• Review security documentation and assurance reports (SOC 2, security questionnaires).
• Assist in reviewing client and supplier contracts for security requirements, audit rights, and incident notification obligations.

Skills

IT risk management

Information security

ISO 27001

SOC 2

Supplier risk

Contract review

Stakeholder comms

Education

Bachelor's or Master's degree in CS/InfoSec/IT

Job description

Chain IQ is hiring an IT Risk & Security Specialist to identify and mitigate technology and information security risks across the organization. You will collaborate with IT, Security, Legal, Risk, Procurement, and business stakeholders to embed security into processes and contracts.

The role strengthens security posture while enabling growth and resilience, including handling audits, third-party assessments, and security documentation reviews with a global team.