IT Governance, Risk & Compliance Porto

IT Governance, Risk & Compliance
Porto
Porto, Porto District, Portugal

We’re looking for a IT Risk Officer (Porto/Lisboa)

Who We're Looking For:

Key Responsibilities:

• Manage and maintain the IT Risk Register, ensuring risk criteria (category, owner, impact, due dates, etc. ) are kept up to date.
• Support the annual review of all IT risks and guarantee data quality in the Risk Register tool.
• Organise and facilitate risk assessments with stakeholders (impact, mitigation measures, validation).
• Ensure compliance with IT Risk Management procedures and challenge new risk entries when needed.
• Monitor mitigation plans and related KPIs, raising alerts when risks are not being addressed.
• Produce and present risk and remediation reports for senior management.
• Actively contribute to risk committees, sharing updates on identified risks, categories, treatment, and overall exposure.

Professional Experience & Technical Skills:

• Solid understanding of IT processes, assets, and solutions.
• General knowledge of cybersecurity frameworks and risk management practices.
• Ability to perform risk analysis (identify, assess, and create scenarios).
• Familiarity with internal audit processes and methodologies.
• Knowledge of regulatory and compliance frameworks related to IT and cybersecurity.
• Strong analytical, organisational, and communication skills.

Language Requirement

• English – B2

Work Setup

• Hybrid