Risk Analyst & Permanent Control

Caixa Mágica Software; Porto; Presencial; EUR 42 000 - 65 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health and Life Insurance

Social events and team buildings

Training in latest technologies

Tech equipment

Resumo da oferta

Caixa Mágica Software in Porto invites a Risk Analyst to join the Cybersecurity and Digital Fraud department within Cyber Payment. You will identify and analyze operational risks for IT Payment services and report to the ITRO leader.

Collaborate with security, development, production teams, and IT risk stakeholders to supervise end-to-end cyber risk across IT Cash Management, Customer Data Services, Electronic Payments, and Factoring, focusing on governance and remediation.

Qualificações

• Knowledge of GRC IT / ServiceNow and the Microsoft Office suite.
• Proven knowledge of risk management with +3 years experience.
• Strong analytical skills with ability to perform root cause analysis and impact assessment.
• French language mastery is required.
• Proactive attitude and strong stakeholder management capabilities.

Responsabilidades

• Define and promote cybersecurity governance for ITG’s Payment Services (IT PS).
• Support IT PS in understanding, controlling, and managing their cyber risks.
• Oversee end-to-end cyber risk supervision across IT Cash Management, Customer Data Services, Electronic Payments, and Factoring.
• Identify and analyze risks while coordinating control activities on ICT and non-ICT risks.
• Report to the CISO/ITRO/ICRO Payment and deliver a consolidated risk overview.

Conhecimentos

GRC IT / ServiceNow

Risk management

Root cause analysis

Stakeholder management

French - Mastery

Ferramentas

ServiceNow

Microsoft Office

Descrição da oferta de emprego

Within our Cybersecurity and Digital Fraud department, the Risk Analyst role in the Cyber Payment area will give you valuable experience in cybersecurity and payments—both strategic priorities for the Group. Within the IT Group (ITG), the Cybersecurity and Digital Fraud (CDF) department manages the cyber risks of our information systems to protect the Bank and its customers. As a member of CDF you will join the CISO Payment team. Your primary mission is to identify and analyze operational risks through control execution for the IT Payment services perimeter and monitor associated remediation actions. You will report to the ITRO leader.

In this role you will collaborate with security, development and production teams, as well as with IT risk stakeholders such as the IT Risk Manager, the IT Continuity & Resilience Officer, and the RISK function.

Beyond an understanding of cybersecurity and our organization, it will be a plus if you are also familiar with payment activities and the relevant regulations — DORA, and PCI‑DSS — given the high criticality of the scope.

What will you do?

• Define and promote cybersecurity governance for ITG’s Payment Services (IT PS).
• Support IT PS in understanding, controlling, and managing their cyber risks.
• Oversee end-to-end cyber risk supervision across the three cross entity sectors: IT Cash Management, Customer Data Services, Electronic Payments, and Factoring.

Identify and analyze risks while collaborating to permanent control activities on ICT and non-ICT risks:

• Determine root causes and potential adverse events;
• Plan and conduct operational risk inputs (RCSA results, historical incidents, control plans) to update the risk landscape;
• Follow remediations by overseeing implementation of corrective actions and verifying effectiveness.

Report to the CISO/ITRO/ICRO Payment:

• Issue alerts, propose corrective actions, and deliver a consolidated risk overview.
• Provide inputs for RCSA, audits and other relevant reviews;
• Support 3rd party management analysis.

What are we looking for?

• Knowledge of GRC IT / Service Now tool and the Microsoft Office suite;
• Proven knowledge of risk management (+3-year experience);
• Strong analytical skills – ability to perform root cause analysis and impact assessment;
• French - Mastery;
• Proactive attitude, strong stakeholder management capabilities, and a continuous learning mindset;
• Strong analytical skills – ability to perform root cause analysis and impact assessment.

What can you expect from us?

• A permanent job contract for a long term project;
• Tech equipment + SIM Card + personal smartphone;
• Health and Life Insurance;
• Social events and team buildings;
• The commitment of letting you grow with us, and be rewarded accordingly;
• A dynamic and young team that will be always there to support you;
• Training in the latest technologies;
• Coffee, fruits, snacks and a warm welcoming when you pass by the office.