Security Risk Officer

Nimber; Lisboa; Hybrid; EUR 60,000 - 90,000; Full time

Job summary

Nimber is seeking a Security Risk Officer to lead technology risk management, identify, assess and monitor IT risks, and ensure regulatory compliance across hybrid environments. You will develop risk frameworks and provide oversight to IT teams, reporting technology risks and mitigation to senior management.

Strong knowledge of ISO27001/NIST, Power BI, Splunk, and ITIL/COBIT will help you succeed in our dynamic, results‑driven setting while promoting a proactive risk management culture.

Qualifications

• Bachelor's degree in Computer Science, IT, or related field.
• Proven technology risk management experience in banking or financial services.
• Knowledge of ISO27001 and NIST regulatory standards.
• Experience with Power BI and Excel.
• Knowledge of Splunk is a plus.
• Certifications such as ISO27001, CISSP, CISM, or CRISC are a plus.
• English level minimum B2; strong analytical and communication skills.

Responsibilities

• Communicate governance, risk management, control strategies, and policies.
• Report on technological risks, vulnerabilities, and mitigation effectiveness to senior management.
• Provide independent oversight of IT team choices and promote risk culture.
• Develop and implement risk mitigation strategies and controls with IT teams.
• Ensure compliance with laws, regulations, and industry standards.
• Identify and quantify IT risks impacting operations and data security.
• Monitor technology infrastructure to identify emerging risks or vulnerabilities.
• Develop technology risk management policies and procedures.
• Maintain comprehensive risk reports for senior management and stakeholders.

Skills

Analytical thinking

Problem solving

Communication

Stakeholder communication

Proactivity

Results oriented

Education

Bachelor's degree in Computer Science/IT or related field

Tools

Power BI

Excel

Splunk

COBIT

ITIL

Job description

Hey there, think you stumbled upon this job posting by chance? We dont believe in chance at Nimber.

Caught your eye? Great. Keep going...

We are Nimber, and we are not just filling positions, we are building a team that is ready to shake things up. If you are ready to rewrite the rules and make a real impact, this is your moment. Join us and lets put the future where it belongs. In the hands of passionate people.

But what does Nimber mean?In mathematics and game theory, they are numbers with special properties of addition and multiplication. And what we really want is to add value to customers' projects.

Position:Security Risk Officer

Location: Hybrid

Job Summary: Technology Risk Management professional responsible for identifying, assessing and monitoring IT risks, ensuring regulatory compliance and effective risk mitigation. The role includes maintaining risk frameworks and controls, providing oversight to IT teams, and reporting technology risks and mitigation measures to senior management.

Key Responsibilities:

• Communicate corporate governance, risk management, control strategies, frameworks, and policies;
• Communicate effectively with stakeholders, including senior management, to report on the status of technological risks, potential vulnerabilities, and the effectiveness of risk mitigation measures;
• Report on enterprise-wide technology risks to senior management;
• Provide independent oversight and challenge of IT team choices;
• Provide training tools and advice to your perimeters and promote a strong risk management culture;
• Ensure that activities comply with applicable laws and regulations;
• Identify potential technological risks that could impact the bank's operations, including cybersecurity threats, data breaches, system failures, and other IT-related risks;
• Assess the potential impact and likelihood of technological risks and work to quantify and prioritize these risks based on their severity and potential impact on the bank's operations;
• Continuously monitor and analyze the bank's technology infrastructure and systems to identify any emerging risks or vulnerabilities that could pose a threat to the bank's operations and data security;
• Ensure that the bank's technology systems and operations comply with relevant regulatory requirements and industry standards, such as data protection regulations and cybersecurity best practices;
• Develop and implement risk mitigation strategies and controls to address identified technological risks, including collaborating with IT teams to implement security measures and controls;
• Contribute to the development and implementation of technology risk management policies and procedures to ensure the bank's technology infrastructure is secure and resilient.
• Develop and maintain the technology risk management framework, policies, and procedures.
  Communicate effectively with stakeholders, including senior management, to report on the status of technological risks, potential vulnerabilities, and the effectiveness of risk mitigation measures;
• Provide training, tools, and advice to staff members to promote a strong risk management culture and awareness of technology risks;
• Develop and maintain comprehensive reports on technological risks, vulnerabilities, and risk mitigation measures for senior management and stakeholders.

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or related field;
• Proven experience in technology risk management within the banking or financial services industry;
• Strong understanding of technology infrastructure, security principles, and risk assessment methodologies;
• Knowledge of regulatory requirements and industry standards related to technology risk management such as ISO27001 and NIST;
• Experience with Power BI and Excel;
• Knowledge of Splunk is a plus;
• Knowledge of COBIT and ITIL framework is a plus;
• Relevant certifications such as ISO27001, ISO27005, CISSP, CISM, or CRISC are a plus;
• English level minimum B2;
• Excellent analytical, problem-solving, and communication skills;
• Creative and proactive;
• Results oriented;
• Comfortable communicating with various stakeholders and senior management.

This is our winning strategy, built on the core principles of impartiality, independence, and fairness at Nimber. The only thing missing is you!