Security Risk Analyst

ITDS; Porto; Presencial; EUR 50 000 - 80 000; Tempo integral

Resumo da oferta

ITDS is seeking an Obsolescence and Vulnerability Security Risk Analyst to identify, assess, and mitigate technology risks for a leading financial institution. The role emphasizes governance, compliance, and proactive risk management across IT infrastructure.

Fluent English and Portuguese proficiency are required. You will report to senior management, oversee risk assessments, develop controls, and deliver training to promote a strong risk culture, with emphasis on ISO27001/NIST/ITIL standards

Qualificações

• Minimum 3 years' experience in cybersecurity or technology risk management.
• Strong knowledge of technology infrastructure, vulnerabilities and risk assessment methodologies.
• Proficiency in Power BI and Excel; knowledge of Splunk is a plus.
• Familiarity with ISO27001, NIST, COBIT and ITIL frameworks.
• Bachelor’s degree in IT, Computer Science, or related field.
• Excellent communication and analytical skills; engaging with senior management.
• Portuguese language proficiency is required.

Responsabilidades

• Communicate governance, risk management, control strategies, frameworks and policies.
• Report on technological risks, vulnerabilities, and mitigation success to senior management.
• Oversee enterprise-wide technology risk assessments for regulatory compliance.
• Provide independent oversight of IT decisions to uphold security standards.
• Develop training and tools to promote a strong risk management culture.
• Continuously monitor the bank’s technology infrastructure for emerging risks.
• Collaborate with IT teams to implement risk mitigations and controls.
• Maintain and update the technology risk management framework, policies and procedures.
• Ensure compliance with laws and standards (ISO27001, NIST) and data protection regulations.
• Prepare detailed risk reports for senior management.

Conhecimentos

English

Portuguese

Formação académica

Bachelor's degree in IT/CS

Ferramentas

Power BI

Excel

Splunk

Descrição da oferta de emprego

As an Obsolescence and Vulnerability Security Risk Analyst, you will be working for a leading financial institution committed to excellence in risk management and cybersecurity. Your role will focus on identifying, assessing, and mitigating technology and vulnerability risks in accordance with regulatory standards, supporting the bank’s mission to maintain secure and resilient banking services. This is a fantastic opportunity to advance your career within a dynamic, innovation-driven environment.

Your main responsibilities:

• Communicate corporate governance, risk management, control strategies, frameworks, and policies.
• Effectively report on technological risks, vulnerabilities, and risk mitigation success to senior management and stakeholders.
• Oversee enterprise-wide technology risk assessments, ensuring compliance with industry and regulatory requirements.
• Provide independent oversight and challenge IT team decisions to uphold security and risk standards.
• Develop and deliver training and tools to promote a strong risk management culture across teams.
• Continuously monitor the bank’s technology infrastructure to identify emerging risks or vulnerabilities.
• Collaborate with IT teams to develop and implement risk mitigation strategies and controls.
• Maintain and update the technology risk management framework, policies, and procedures.
• Ensure compliance with relevant laws, standards (such as ISO27001, NIST), and data protection regulations.
• Prepare detailed reports on risks, vulnerabilities, and mitigation measures for senior management.

You’re ideal for this role if you have:

• Minimum 3 years' experience in cybersecurity or technology risk management within the banking or financial sector.
• Strong knowledge of technology infrastructure, vulnerabilities, and risk assessment methodologies.
• Proficiency in Power BI and Excel; knowledge of Splunk is a plus.
• Familiarity with regulatory standards such as ISO27001, NIST, COBIT, and ITIL frameworks.
• Relevant certifications such as ISO27001, ISO27005, CISSP, CISM, CRISC are highly valued.
• Bachelor’s degree in IT, Computer Science, or related field.
• Fluent command of English; professional proficiency in Portuguese is necessary.
• Excellent communication, analytical, and problem-solving skills.
• Results-oriented, proactive, and capable of engaging with diverse stakeholders, including senior management.

It is a strong plus if you have:

• Additional certifications in cybersecurity or risk management.
• Experience with vulnerability management tools and vulnerability databases.

Language Required for the role:

Eligibility to work in:

Europe – Only candidates with an existing legal right to work within the European Union will be considered.