Senior Expert Information Security (Hybrid)

iTRTech Group; Porto; Hybride; EUR 40 000 - 44 000; Plein temps

Résumé du poste

iTRTech Group in Porto, Portugal, is seeking a Senior Information Security Expert to strengthen governance, risk management, and secure architecture. The role is hybrid, requiring two days per week in the office.

You will protect digital assets, support compliance with GDPR, ISO, and SOC, and advise teams on secure software design and threat modelling. Fluent English is mandatory, with 5–8 years of relevant experience.

Qualifications

• 5–8 years of proven experience in Information Security, Cybersecurity, or Platform Security.
• Strong experience in enterprise security environments and complex technology landscapes.
• Expertise in security governance, risk management, and compliance, including security assessments and reviews.
• Strong knowledge of security architecture and secure system design.
• Expertise in Identity and Access Management (IAM), authentication, and authorization.
• Experience with application, cloud, and infrastructure security.
• Familiarity with threat modelling, vulnerability management, and secure software development.
• Knowledge of SIEM, DLP, endpoint protection, and monitoring tools, with an understanding of Agile environments.

Responsabilités

• Define and enforce security strategies, policies, standards, and controls.
• Assess and oversee security architectures across applications, cloud platforms, and infrastructure.
• Identify and mitigate risks, vulnerabilities, and emerging threats.
• Support compliance with applicable requirements and frameworks, including GDPR, ISO, and SOC.
• Advise teams on secure software design, threat modelling, and security best practices.
• Support incident response, audits, security awareness, and continuous improvement.

Connaissances

Security governance

GRC

Risk assessment

Threat modelling

Security architecture

IAM

Cloud security

Incident response

Vulnerability management

SIEM

Formation

CCSP certification

CISSP

CISM

Outils

SIEM

DLP

Endpoint protection

Monitoring tools

Description du poste

SENIOR EXPERT INFORMATION SECURITY (HYBRID PORTO)

Portuguese company hires for hybrid position

Location: Porto, Portugal

Only candidates already based in Portugal will be considered

Work Model: Hybrid — 2 days per week in the office

Language Requirements: Fluent English required

Seniority: Senior (5-8 years)

Rate Between €3600 - 3900 RV or unipessoal (gross value)

About the Opportunity

We are looking for a Senior Information Security Expert to strengthen security governance, risk management, and secure architecture. You will help protect digital assets, support compliance, and align security practices with business and technology needs.

Responsibilities

• Define and enforce security strategies, policies, standards, and controls.
• Assess and oversee security architectures across applications, cloud platforms, and infrastructure.
• Identify and mitigate risks, vulnerabilities, and emerging threats.
• Support compliance with applicable requirements and frameworks, including GDPR, ISO, and SOC.
• Advise teams on secure software design, threat modelling, and security best practices.
• Support incident response, audits, security awareness, and continuous improvement.

Requirements

• 5–8 years of proven experience in Information Security, Cybersecurity, or Platform Security.
• Strong experience in enterprise security environments and complex technology landscapes.
• Expertise in security governance, risk management, and compliance, including security assessments and reviews.
• Strong knowledge of security architecture and secure system design.
• Expertise in Identity and Access Management (IAM), authentication, and authorization.
• Experience with application, cloud, and infrastructure security.
• Familiarity with threat modelling, vulnerability management, and secure software development.
• Knowledge of SIEM, DLP, endpoint protection, and monitoring tools, with an understanding of Agile environments.

Preferred: CCSP certification. CISSP and CISM are additional advantages.

Ideal Candidate Profile

An analytical and accountable security professional who can translate business needs into practical security controls. Able to influence stakeholders, explain technical concepts clearly, and balance security requirements with usability, performance, and delivery objectives.

5 Questions for Candidates

1. Do you have 5–8 years of relevant experience in enterprise information security?
2. What experience do you have with security governance, risk assessments, and compliance frameworks?
3. Have you designed or reviewed security architectures covering IAM, applications, cloud, and infrastructure?
4. How have you supported threat modelling, vulnerability management, incident response, or security audits?
5. Are you fluent in English and available to work on-site in Porto 2 days per week?

Keywords

Information Security, Cybersecurity, Security Governance, GRC, Risk Management, Security Architecture, IAM, Authentication, Authorization, Application Security, Cloud Security, Threat Modelling, Vulnerability Management, SIEM, DLP, Incident Response, GDPR, ISO, SOC, CCSP, CISSP, CISM.