Vendor Risk Analyst – Cyber Lisboa

Vendor Risk Analyst – Cyber
Lisboa
Lisboa, Lisboa, Portugal

Vendor Risk Analyst – Cyber

Country: Portugal

As a Vendor Risk Specialist in Cyber, you will be a member of our European VRAC team based in Lisbon, Portugal.

You will be responsible for certifying and managing Vendors regarding Cyber and Contingency risks.

The main activities you will do on a daily basis include:

• Review and challenge of inherent risk scoring of critical services.
• Certify critical services/vendors, establish and monitor remediation plans, and issue residual risk ratings.
• Report and collaborate with the local CISO team regarding risk assessment results and continuous improvement of risk methodology.
• Periodic reporting to local Cost/Risk areas and respective committees.

Skills & Responsibilities:

The position requires proven experience in Security Governance and Risk Management, along with a solid education in Cybersecurity and Information Technology.

What we are looking for:

• Several years of experience working in Cybersecurity, IT Risk, or IT Audit.
• Knowledge of information technology and security certifications, standards, and frameworks such as ISAE/SOC, NIST CSF, ISO/IEC, COBIT.
• Knowledge of IT Audit practices, IT Risk Management, Vulnerability Management, Security testing methodologies (OWASP, OSSTMM).
• Fluent communication skills in Portuguese and English; Spanish is desirable.
• Ability to manage multiple tasks simultaneously and work effectively as part of a team.
• Excellent communication and writing skills.
• Strong attention to detail and analytical skills.
• Ability to work with diverse teams.
• Good interpersonal skills.
• International certifications or a Master’s degree in Cybersecurity, Information Systems Control, or Business Continuity are valued.

At Santander, each of us is a “Risk Pro”, responsible for identifying, assessing, managing, and reporting risks associated with our duties. We provide the knowledge and tools to support this culture, which is fundamental to the Santander Way.

In accordance with Law / December regulations, the Bank has a whistleblowing channel - Open Channel, accessible via the provided link.