Senior Cyber Risk & Assurance Lead — Hybrid

Pepco Iberia; Porto; Hybrid; EUR 85,000 - 110,000; Full time

Benefits offered by this job

Hybrid work model

Porto office location

Competitive salary and annual bonus

Health insurance from month after join

Meal allowance

Employee discount in Pepco stores in (

Learning and development opportunities

International exposure across markets

Collaborative, down-to-earth culture

Job summary

Pepco Iberia is expanding its Tech Hub in Porto and seeks a Senior Cyber Risk & Assurance Specialist. You will strengthen governance, risk management, and compliance across the organization, collaborating with business and tech teams to lead risk activities and drive improvements.

You will manage audits, supplier security assessments, and assurance testing, working in a hybrid model with strong stakeholder engagement and multilingual capabilities valued.

Qualifications

• Bachelor’s or Master’s in Cybersecurity, Information Security, IT, Risk Management or related field.
• Experience in cyber risk assessments and regulatory compliance activities.
• Knowledge of ISO 27005, NIST RMF, and enterprise risk management.

Responsibilities

• Conduct cyber risk assessments across business and tech areas, identify vulnerabilities, and recommend mitigations.
• Facilitate risk assessments and workshops with guidance on risk treatment decisions.
• Develop risk reports, dashboards, and insights for informed business decisions.
• Support information security policies, standards, and governance frameworks.
• Coordinate audits, assess controls, and monitor remediation activities.
• Conduct third‑party security assessments and vendor risk evaluations.
• Support security awareness initiatives and phishing simulations.
• Collaborate with Security Architecture, Security Ops, Internal Audit, Procurement, Legal and Privacy teams.

Skills

Cyber risk assessments

Risk governance

Compliance & audits

Regulatory standards

Vendor security assessments

Stakeholder management

Data analysis & reporting

English fluency

Education

Bachelor’s or Master’s degree in Cybersecurity or related

CRISC/CISA/CISM or ISO 27001 Lead Auditor/Implementer/PCI Professional

Job description

Pepco Iberia is expanding its Tech Hub in Porto and seeks a Senior Cyber Risk & Assurance Specialist. You will strengthen governance, risk management, and compliance across the organization, collaborating with business and tech teams to lead risk activities and drive improvements.

You will manage audits, supplier security assessments, and assurance testing, working in a hybrid model with strong stakeholder engagement and multilingual capabilities valued.