Senior Cybersecurity Consultant — Risk & Compliance Leader

KPMG Portugal; Portugal; On-site; EUR 40,000 - 65,000; Full time

Job summary

KPMG Portugal is seeking a Senior Cybersecurity Consultant to join our Technology Consulting Team in the Porto/Lisbon offices.

Ideal candidate will have +4 years of professional experience, strong knowledge of cybersecurity frameworks, governance, risk and compliance, and fluency in English. Role involves developing security controls, risk assessment programs, and conducting cybersecurity audits.

Qualifications

• Degree in Computer Science, Engineering, Information Systems or related fields is a plus.
• +4 years of professional experience.
• Experience in governance, risk and compliance projects.
• Familiar with cybersecurity standards and frameworks.
• Knowledge of IT systems, networks and data processes.
• Experience in audits and risk assessments.
• Dashboard/report creation skills.
• Certifications: ISO/IEC 27001, CISA, CompTIA Security+ (optional).
• Fluent in English.

Responsibilities

• Develop and implement security controls and risk assessment frameworks aligning to regulatory requirements.
• Execute information security, risk analysis, business continuity and data protection projects.
• Conduct information security compliance and maturity assessments using standards and best practices.
• Assess risk and contribute to security standards, procedures and controls to manage risks.
• Support in auditing cybersecurity controls.
• Define incident response plans and generate GRC reports.

Skills

Cybersecurity principles

Security standards & frameworks

Risk management

Internal audit & regulatory compliance

Information systems auditing

Dashboard & report creation

English fluency

Education

Degree in Computer Science, Engineering, Information Systems or related fields

Job description

KPMG Portugal is seeking a Senior Cybersecurity Consultant to join our Technology Consulting Team in the Porto/Lisbon offices.

Ideal candidate will have +4 years of professional experience, strong knowledge of cybersecurity frameworks, governance, risk and compliance, and fluency in English. Role involves developing security controls, risk assessment programs, and conducting cybersecurity audits.