Senior IT Risk & GRC Analyst

Decskill; Lisboa; Híbrido; EUR 60 000 - 90 000; Tempo integral

Resumo da oferta

Decskill is growing and seeking an IT Risk Analyst to join our Lisbon-area team. You will implement and promote the IT Risk Management framework, identify IT risks across assets, projects and operations, and collaborate with Business, IT, Security, Compliance and Legal teams.

We value strong knowledge of IT risk management, experience in IT audit/security, and familiarity with GRC tools and regulatory requirements. Fluent English and stakeholder management are essential for success in this role.

Qualificações

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• 10–15 years of relevant experience in IT Audit, IT Security, or IT Risk Management, preferably in banking/financial services.
• Strong knowledge of IT Risk Management frameworks and practices; SDLC and GRC processes familiarity.

Responsabilidades

• Implement and promote the organization's IT Risk Management framework.
• Identify and assess IT risks related to assets, projects and production environments.
• Collaborate with cross-functional stakeholders including Business, IT, Architecture, Security, Data, Risk, Legal and Compliance teams.
• Record IT risks in the GRC tool and monitor remediation activities.
• Analyze IT risk reports, KRIs and risk dashboards.

Conhecimentos

IT Risk Management

IT Audit

IT Security

Data Governance

Data Protection

SDLC knowledge

Analytical skills

English proficiency

Stakeholder management

Regulatory compliance knowledge

Formação académica

Bachelor's degree in IT / CS / Cybersecurity

Ferramentas

ServiceNow GRC

Descrição da oferta de emprego

Decskill is growing and seeking an IT Risk Analyst to join our Lisbon-area team. You will implement and promote the IT Risk Management framework, identify IT risks across assets, projects and operations, and collaborate with Business, IT, Security, Compliance and Legal teams.

We value strong knowledge of IT risk management, experience in IT audit/security, and familiarity with GRC tools and regulatory requirements. Fluent English and stakeholder management are essential for success in this role.