Senior Cyber Risk And Assurance Specialist

Pepco Tech Hub; Porto; Hybrid; EUR 60.000 - 90.000; Vollzeit

Benefits dieser Stelle

Hybrid model: 2 days remote / 3 days现场

Office base in Porto

Competitive salary and annual bonus

Health insurance from joining

Meal allowance

Employee discount in Pepco stores in葡萄

Learning and development opportunities

International exposure and cross‑martk

Down‑to‑earth culture

Zusammenfassung

Pepco Tech Hub in Porto is seeking a Senior Cyber Risk & Assurance Specialist to strengthen governance, risk management, compliance, and assurance practices across the organisation.

The role leads cyber risk activities, supports regulatory compliance, coordinates audits, and drives continuous improvement with business and technology teams. Fluency in English is required, with prior multinational experience a plus.

Qualifikationen

• Bachelor’s or Master’s degree in Cybersecurity, Information Security, IT, Risk Management, Business Administration, or related field.
• Certifications such as CRISC, CISA, CISM, ISO 27001 Lead Auditor/Implementer, or PCI Professional are a plus.
• At least 7 years of experience in cybersecurity, risk management, governance, compliance, audit, or assurance.

Aufgaben

• Conduct complex cyber risk assessments across business and technology areas, identifying vulnerabilities and mitigating risks.
• Facilitate risk assessments and workshops, guiding risk treatment and acceptance decisions.
• Develop risk reports, dashboards, and insights to support informed business decisions.
• Support development and improvement of information security policies, standards, and governance frameworks.
• Coordinate audits and assess security controls, monitoring remediation activities.
• Conduct third-party security assessments and vendor risk evaluations.
• Participate in security assurance testing and control validation.
• Support security awareness initiatives and phishing simulations.
• Collaborate with Security Architecture, Security Operations, Internal Audit, Procurement, Legal, Privacy, etc.
• Serve as a senior SME, sharing knowledge and owning risk/assurance areas.

Kenntnisse

Fluent English

Analytical thinking

Communication

Stakeholder management

Ausbildung

Bachelor’s or Master’s degree in Cybersecurity/Information Security/IT Risk Management

Certifications such as CRISC, CISA, CISM, ISO 27001 Lead Auditor/Implementer, PCI Professional

Tools

Reporting tools

Data analysis tools

Jobbeschreibung

Build. Test. Deliver. Enjoy at Pepco!

At Pepco, we’re growing fast and building our Tech Hub in Porto to support our business across Europe.

We are looking for a Senior Cyber Risk & Assurance Specialist to join our team. In this role, you will help strengthen our cybersecurity governance, risk management, compliance, and assurance practices, ensuring that security risks are effectively identified, assessed, and managed across the organisation. Working closely with business and technology teams, you will lead cyber risk and assurance activities, support regulatory compliance, and drive continuous improvement in our security processes.

If you like things simple, practical and with real ownership, you’ll fit right in.

What you’ll be doing

• Conduct complex cyber risk assessments across business and technology areas, identifying vulnerabilities, evaluating risks, and recommending mitigation strategies.
• Facilitate risk assessments and workshops, providing expert guidance on risk treatment and acceptance decisions.
• Develop risk reports, dashboards, and insights to support informed business decisions.
• Support the development and continuous improvement of information security policies, standards, and governance frameworks.
• Manage compliance activities related to ISO 27001, NIS2, PCI-DSS, GDPR, and other applicable requirements.
• Coordinate internal and external audits, assess security controls, and monitor remediation activities.
• Conduct third-party security assessments, evaluating supplier risks, security controls, and compliance documentation.
• Participate in security assurance testing, control validation, and cyber resilience exercises.
• Support security awareness initiatives, including training programmes and phishing simulations.
• Collaborate with Security Architecture, Security Operations, Internal Audit, Procurement, Legal, Privacy, and other business teams.
• Act as a senior subject matter expert, sharing knowledge with colleagues, taking ownership of specific risk and assurance areas, and supporting the Cyber Risk & Assurance Lead when needed.

What we’re looking for

• Bachelor’s or Master’s degree in Cybersecurity, Information Security, IT, Risk Management, Business Administration, or a related field. Certifications such as CRISC, CISA, CISM, ISO 27001 Lead Auditor/Implementer, or PCI Professional (PCIP) are a plus.
• At least 7 years of experience in cybersecurity, risk management, governance, compliance, audit, or assurance.
• Proven experience conducting cyber risk assessments, evaluating security controls, and supporting compliance activities. Experience in third-party risk management or vendor security assessments is an advantage.
• Strong knowledge of cybersecurity governance and risk management frameworks, including ISO 27005, NIST RMF, and enterprise risk management principles.
• Good understanding of information security frameworks and standards, such as ISO 27001, NIST CSF, and CIS Controls.
• Knowledge of regulatory requirements, including NIS2, GDPR, and PCI-DSS, and their practical application.
• Experience supporting internal and external audits, regulatory assessments, or certification processes.
• Ability to analyse technical and organisational risks and translate findings into practical business recommendations.
• Experience with reporting, dashboards, and data analysis tools.
• Strong analytical thinking, attention to detail, and the ability to manage multiple priorities independently.
• Excellent communication and stakeholder management skills, with the ability to work effectively with both technical and non-technical teams. Previous experience in multinational, complex, or regulated environments is a plus.
• Fluent English, both written and spoken. Additional languages are an advantage.

What we offer

• Hybrid model: 2 days remote / 3 days onsite
• Office based in Porto: https://maps.app.goo.gl/Nn7hc6uYrmPiT8Fc9
• Competitive salary and annual bonus
• Health insurance from the month after joining
• Meal allowance
• Employee discount in Pepco stores in Portugal
• Learning and development opportunities
• International exposure and collaboration across markets
• A simple, down-to-earth culture where people support each other

About Pepco

Pepco is one of Europe’s fastest-growing retail companies, with thousands of stores and millions of customers visiting us every month. Behind that growth, there’s a team of people who make things happen. We keep things simple, we focus on results, and we support each other to get there. At Pepco, no two days are the same. And that’s exactly how we like it.