Senior Expert Information Security

team.it; Porto; On-site; EUR 70,000 - 95,000; Full time

Job summary

team.it in Porto seeks a Senior Expert Information Security to define and enforce security strategies, policies, and controls across applications, cloud, and infrastructure.

You will lead risk assessments, threat modelling, and security testing, ensure GDPR and ISO/SOC compliance, and mentor teams. The role offers a collaborative culture, learning opportunities, and a comprehensive benefits package.

Qualifications

• 5-8 years of proven experience in Information Security, Cybersecurity, or Platform Security roles.
• Strong experience in enterprise security environments and complex technology landscapes.
• Strong expertise in security governance, risk management, and compliance.
• Ability to translate business requirements into practical and effective security solutions.
• Experience advising and influencing stakeholders across technical and business areas.
• Proven experience conducting security assessments, reviews, and risk evaluations.
• Ability to balance security requirements with usability, performance, and delivery objectives.
• Understanding of security frameworks, regulatory requirements, and industry best practices.
• Strong knowledge of security architecture and secure system design.
• Expertise in IAM, authentication, and authorization mechanisms.
• Experience with security governance, cloud security, and infrastructure security.
• Familiarity with threat modelling, vulnerability management, and security testing methodologies.
• Knowledge of security monitoring and protection tools, including SIEM, DLP, endpoint protection, and monitoring solutions.

Responsibilities

• Define and enforce information security strategies, policies, standards, and controls aligned with business objectives.
• Assess, design, and oversee security architectures across applications, cloud platforms, and infrastructure environments.
• Identify, assess, and mitigate security risks, vulnerabilities, and emerging threats.
• Ensure compliance with regulatory, legal, and industry standards, including GDPR, ISO, and SOC frameworks.
• Advise project teams and stakeholders on secure software design, threat modelling, and security best practices.
• Support incident response activities, security audits, and continuous improvement initiatives.
• Promote security awareness and drive the adoption of security controls across the organization.

Skills

IAM

Security governance

Risk management

Compliance

Security architecture

Threat modelling

Security testing

Cloud security

Application security

Infrastructure security

Tools

SIEM

DLP

Endpoint protection

Monitoring solutions

Job description

We want to do things differently, focusing on what truly matters. We return to our roots with a sustainable corporate strategy at our core. Work-life balance, beginner’s mind, and community involvement are our identity and our starting point for this journey.

Senior Expert Information Security - Is that you?

Key Responsibilities

• Define and enforce information security strategies, policies, standards, and controls aligned with business objectives.
• Assess, design, and oversee security architectures across applications, cloud platforms, and infrastructure environments.
• Identify, assess, and mitigate security risks, vulnerabilities, and emerging threats.
• Ensure compliance with regulatory, legal, and industry standards, including GDPR, ISO, and SOC frameworks.
• Advise project teams and stakeholders on secure software design, threat modelling, and security best practices.
• Support incident response activities, security audits, and continuous improvement initiatives.
• Promote security awareness and drive the adoption of security controls across the organization.

Required Skills & Experience

• 5-8 years of proven experience in Information Security, Cybersecurity, or Platform Security roles.
• Strong experience working within enterprise security environments and complex technology landscapes.
• Strong expertise in security governance, risk management, and compliance.
• Ability to translate business requirements into practical and effective security solutions.
• Experience advising and influencing stakeholders across technical and business areas.
• Proven experience conducting security assessments, reviews, and risk evaluations.
• Ability to balance security requirements with usability, performance, and delivery objectives.
• Understanding of security frameworks, regulatory requirements, and industry best practices.
• Strong knowledge of security architecture and secure system design.
• Expertise in Identity and Access Management (IAM), authentication, and authorization mechanisms.
• Experience with application security, cloud security, and infrastructure security.
• Familiarity with threat modelling, vulnerability management, and security testing methodologies.
• Knowledge of security monitoring and protection tools, including SIEM, DLP, endpoint protection, and monitoring solutions.
• Understanding of security controls, risk mitigation strategies, and secure software development practices.

Nice to Have

• CCSP (Certified Cloud Security Professional) certification.
• CISSP (Certified Information Systems Security Professional) certification.
• CISM (Certified Information Security Manager) certification.
• Experience with security governance frameworks and compliance-driven environments.
• Knowledge of cloud-native, zero-trust, and modern security architectures.
• Strong communication skills with the ability to explain security concepts to technical and non-technical audiences.
• Ability to influence and drive security adoption across teams and stakeholders.
• Strong ownership, accountability, and decision-making skills.

Senior Expert Information Security — Is that us?

• Horizontal structure. Everyone has a voice and is heard. We are looking for ambitious people who want to help us achieve what has not yet been done.
• Personalized support. We value close and regular follow-up. We are a team from day one.
• Comprehensive and flexible benefits package. Health insurance, life insurance, discounts and perks, telecommunications plan, and much more.
• Investment in learning and career development. Certified training, online learning platforms, Pearson VUE exam center… we invest in you!
• Sustainability and community involvement. We want meaningful work and to invest in an inclusive consulting project—and we need your help to make it happen.

Ready?

team.it, back to basics!

At Team IT, we stand for equality and value diversity. We create a safe and inclusive environment where opportunities are equal for everyone. We do not discriminate based on age, ethnicity, sexual orientation, gender, disability, or any factor other than merit. All applications from candidates with the right skills for the role are welcome.