We are looking for an experienced Information Security Officer (ISO) to join an international financial services environment. This role will be responsible for supporting information security governance, managing security risks, coordinating vulnerability management activities, and ensuring alignment with cybersecurity policies, standards, and regulatory requirements. The successful candidate will work closely with IT, Risk, Compliance, Audit, and Business stakeholders, contributing to the organization's overall security posture.
Key Responsibilities:
- Coordinate and monitor the Vulnerability Management lifecycle, working closely with Infrastructure, Development, Production, and other IT teams.
- Conduct information security risk assessments for projects, systems, and technology initiatives.
- Identify, analyse, and track security risks, ensuring appropriate remediation and mitigation plans are implemented.
- Define, monitor, and improve security controls in accordance with internal policies and industry best practices.
- Produce and maintain security dashboards, KPIs, metrics, and management reports.
- Act as the primary security point of contact for local IT teams and business stakeholders.
- Support internal and external audits by providing evidence, documentation, and remediation follow-up.
- Promote security awareness initiatives and contribute to the development of a strong cybersecurity culture.
- Participate in security governance activities, ensuring compliance with security standards, policies, and regulatory requirements.
- Collaborate with Cybersecurity, Risk, Compliance, Internal Audit, Procurement, and external partners on security-related matters.
- 5+ years of experience in Information Security, Cybersecurity, IT Risk, or related areas.
- Strong understanding of Information Security Governance, Risk Management, and Security Controls.
- Proven experience conducting Security Risk Assessments and Vulnerability Assessments.
- Hands-on experience with Vulnerability Management processes and remediation follow-up.
- Knowledge of security frameworks and standards, particularly ISO 27001.
- Experience supporting audits, compliance activities, and control testing.
- Ability to analyse security metrics and provide executive-level reporting.
- Fluent English, both written and spoken.
Nice to Have:
- Professional certifications such as CISSP, CCSP, ISO 27001 Lead Implementer, or equivalent.
- Experience within Banking, Financial Services, or highly regulated environments.
- Knowledge of French.
Soft Skills:
- Strong analytical and problem-solving capabilities.
- Excellent stakeholder management and communication skills.
- Ability to work autonomously and manage multiple priorities effectively.
- Proactive mindset with a strong sense of ownership and accountability.
- Ability to influence and collaborate across technical and non-technical teams.
- Strong organisational skills and attention to detail.
- Comfortable working in multicultural and international environments.
- Workplace type: Hybrid (50% onsite, 50% remote).
- Location: Parque das Nações, Lisboa.