Security Risk Manager

Shakers; Lisboa; Hybrid; EUR 60,000 - 90,000; Full time

Job summary

Shakers is seeking a technology risk professional to join the first line of defence within a leading European financial services group. The role is hybrid in Lisbon or Porto, placed close to the infrastructure and the people who run it.

You will run risk assessments across infrastructure and security domains, translate standards into actionable controls, build senior-ready risk reports, and track remediation to keep the risk picture current.

Qualifications

• 5+ years in technology risk management, in banking or financial services.
• Degree in Computer Engineering, Information Technology or similar.
• Solid grounding in technology infrastructure, security principles and risk assessment methodologies.
• Working knowledge of regulatory requirements and industry standards that apply to technology risk.
• Power BI and Excel.

Responsibilities

• Run technology risk assessments across infrastructure and security domains.
• Translate regulatory and industry standards into controls the teams can apply.
• Build and maintain risk reporting that senior stakeholders use to decide.
• Track remediation and keep the risk picture current.
• Collaborate with infrastructure teams to turn gaps into decisions.

Skills

Technology risk management

Regulatory knowledge

Banking/financial services domain

Power BI

Excel

Education

Degree in Computer Engineering or Information Technology

Tools

Power BI

Excel

Splunk

COBIT

ITIL

ISO 27001

ISO 27005

Job description

Technology risk role inside the first line of defence for a leading European financial services organization, delivered through a global technology firm. Hybrid in Lisbon or Porto.

The challenge

Technology risk in banking stopped being an annual audit exercise a long time ago. This role sits in LoD1, close to the infrastructure and the people running it, turning control gaps into decisions the business actually acts on.

• Run technology risk assessments across infrastructure and security domains
• Translate regulatory and industry standards into controls the teams can apply
• Build and maintain risk reporting that senior stakeholders use to decide
• Track remediation and keep the risk picture current
• 5+ years in technology risk management, in banking or financial services
• Degree in Computer Engineering, Information Technology or similar
• Solid grounding in technology infrastructure, security principles and risk assessment methodologies
• Working knowledge of the regulatory requirements and industry standards that apply to technology risk
• Power BI and Excel

Nice to have

• Splunk
• COBIT and ITIL
• ISO 27001, ISO 27005, CISSP, CISM or CRISC

Why this project

Long term, full time, and close to the governance layer of a European financial services group. The risk picture you build gets read by people who decide with it.

#ITRisk #TechnologyRisk #Banking #CyberSecurity #Lisboa #Shakers