IT Security Specialist (Governance, Risk & Compliance) Porto

IT Security Specialist (Governance, Risk & Compliance)
Porto
Porto, Porto District, Portugal

IT Security Specialist (Governance, Risk & Compliance)

Join to apply for the IT Security Specialist (Governance, Risk & Compliance) role at Voltalia.

Our IT Security and Infrastructure Team is looking for an IT Security Specialist GRC, responsible for:

1. Implementing the information and cyber security strategy and program alongside the ISO.
2. Developing and applying risk management methodologies aligned with company policies.
3. Ensuring risk management practices align with the company's framework.
4. Providing guidance on security risk management activities.
5. Assessing security controls effectiveness in IT and OT environments.
6. Monitoring security risks, vulnerabilities, threats, and incidents.
7. Reporting risk trends to relevant stakeholders.
8. Maintaining security documentation and control catalogs.
9. Designing and maintaining a unified IT and OT security architecture.
10. Supporting teams in addressing cybersecurity risks in projects and processes.
11. Developing security training and awareness programs.
12. Providing evidence for audits and compliance checks.
13. Communicating security program status to stakeholders.
14. Monitoring compliance and analyzing key performance metrics.

Qualifications:

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field.
• At least 3 years of experience in GRC security roles.
• Knowledge of security frameworks like ISO 27001, NIST, IEC 62443.
• Familiarity with GDPR, NIS2 regulations.
• Experience with risk management tools and security platforms.
• Experience with security audits and assessments.
• Understanding of cloud and network security principles.
• Willingness to travel mainly within Europe.

Key Skills:

• Critical thinking and
  - solving.
• Willingness to learn.
• Ability to work independently and in teams.
• Handling sensitive information responsibly.
• Organization and
  - tasking skills.
• Effective communication and collaboration skills.
• Passion for cybersecurity and trend awareness.

Additional Details

• Seniority Level: Mid-Senior level
• Employment Type: Full-time
• Job Function: Information Technology