Risk Analyst & Permanent Control

Caixa Mágica Software; Porto; Presencial; EUR 42 000 - 65 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health and Life Insurance

Social events and team buildings

Training in the latest technologies

Coffee, fruits, snacks

Smartphone and SIM card

Resumo da oferta

Caixa Mágica Software in Porto is seeking a Risk Analyst within the Cybersecurity and Digital Fraud department to identify and analyze operational risks for IT Payment services, reporting to the ITRO leader. The role blends cybersecurity awareness with risk governance and collaboration with security, development and production teams.

You will support risk management exercises, contribute to RCSA inputs, audits, and third-party analysis, and oversee remediation actions.

Qualificações

• Knowledge of GRC IT / Service Now tool
• Proven knowledge of risk management (+3-year experience)
• Strong analytical skills – root cause analysis & impact assessment
• English – Mastery
• French – Mastery

Responsabilidades

• Define and promote cybersecurity governance for ITG’s Payment Services (IT PS).
• Support IT PS in understanding, controlling, and managing their cyber risks.
• Oversee end-to-end cyber risk supervision across cross entity sectors: IT Cash Management, Customer Data Services, Electronic Payments, and Factoring.

Conhecimentos

GRC IT

ServiceNow

MS Office

Risk management

Analytical skills

English mastery

French mastery

Ferramentas

ServiceNow

MS Office

Descrição da oferta de emprego

Overview:

Within our Cybersecurity and Digital Fraud department, the Risk Analyst role in the Cyber Payment area will give you valuable experience in cybersecurity and payments—both strategic priorities for the Group. Within the IT Group (ITG), the Cybersecurity and Digital Fraud (CDF) department manages the cyber risks of our information systems to protect the Bank and its customers. As a member of CDF you will join the CISO Payment team. Your primary mission is to identify and analyze operational risks through control execution for the IT Payment services perimeter and monitor associated remediation actions. You will report to the ITRO leader.

In this role you will collaborate with security, development and production teams, as well as with IT risk stakeholders such as the IT Risk Manager, the IT Continuity & Resilience Officer, and the RISK function.

Beyond an understanding of cybersecurity and our organization, it will be a plus if you are also familiar with payment activities and the relevant regulations — DORA, and PCI‑DSS — given the high criticality of the scope.

What will you do?

• Define and promote cybersecurity governance for ITG’s Payment Services (IT PS).
• Support IT PS in understanding, controlling, and managing their cyber risks.
• Oversee end-to-end cyber risk supervision across the three cross entity sectors: IT Cash Management, Customer Data Services, Electronic Payments, and Factoring.

Identify and analyze risks while collaborating to permanent control activities on ICT and non-ICT risks:

• Determine root causes and potential adverse events;
• Plan and conduct operational risk inputs (RCSA results, historical incidents, control plans) to update the risk landscape;
• Follow remediations by overseeing implementation of corrective actions and verifying effectiveness.

Report to the CISO/ITRO/ICRO Payment:

• Issue alerts, propose corrective actions, and deliver a consolidated risk overview.

Support risk-management exercises:

• Provide inputs for RCSA, audits and other relevant reviews;
• Support 3rd party management analysis.

What are we looking for?

• Knowledge of GRC IT / Service Now tool and the Microsoft Office suite;
• Proven knowledge of risk management (+3-year experience);
• Strong analytical skills – ability to perform root cause analysis and impact assessment;
• English – Mastery;
• French - Mastery;
• Proactive attitude, strong stakeholder management capabilities, and a continuous learning mindset;
• Strong analytical skills – ability to perform root cause analysis and impact assessment.

What can you expect from us?

• A permanent job contract for a long term project;
• Tech equipment + SIM Card + personal smartphone;
• Health and Life Insurance;
• Social events and team buildings;
• The commitment of letting you grow with us, and be rewarded accordingly;
• A dynamic and young team that will be always there to support you;
• Training in the latest technologies;
• Coffee, fruits, snacks and a warm welcoming when you pass by the office.