Senior InfoSec Risk & GRC Engineer (SaaS/Cloud)

Five9; Porto; Presencial; EUR 70 000 - 95 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Five9 Shares

Bonus Scheme

10% Flex Benefit

Meal Allowance

Medical Insurance

Life Insurance

25 day Annual Leave + Public Holidays

Resumo da oferta

Five9 seeks a Senior Information Security Engineer to drive risk management across its cloud and on‑premises environments. You will work with engineering, operations, and leadership to surface security risks, assign ownership, and guide remediation strategies.

The role emphasizes building engineering‑driven risk controls, reporting, and governance across the Risk Management program. A CISSP/CISM/CISA/CISA CRISC mindset is preferred.

Qualificações

• 3+ years of information security experience with emphasis on risk management or GRC.
• Experience maintaining a security risk register and driving risk treatment decisions across cross-functional teams.
• Strong knowledge of qualitative and quantitative risk assessment methodologies.
• Familiarity with frameworks such as NIST CSF, NIST 800-53, ISO 27001, PCI, SOC 2.

Responsabilidades

• Identify, document, and assess security risks across Five9's environment including production infra, cloud services, and acquisitions.
• Maintain the Security Risk Register in Jira and track risk lifecycle from identification to remediation.
• Engage with service owners and engineering teams to assign ownership and drive mitigation plans.
• Coordinate risk acceptance processes and prepare acceptance documentation with stakeholders.
• Develop risk reporting dashboards and metrics for security leadership and executives.
• Collaborate with compliance, vulnerability management, and other InfoSec teams to close findings.
• Research and apply risk management frameworks to improve program maturity.
• Contribute to policies, procedures, and playbooks for risk management.

Conhecimentos

Information security

Risk management

GRC

Stakeholder management

NIST CSF

Python

Security metrics

Formação académica

CISSP certification

CISM certification

CISA certification

CRISC certification

Ferramentas

Jira

Descrição da oferta de emprego

Five9 seeks a Senior Information Security Engineer to drive risk management across its cloud and on‑premises environments. You will work with engineering, operations, and leadership to surface security risks, assign ownership, and guide remediation strategies.

The role emphasizes building engineering‑driven risk controls, reporting, and governance across the Risk Management program. A CISSP/CISM/CISA/CISA CRISC mindset is preferred.