IT RISKS SPECIALIST LUX (HYBRID)

IT RISKS SPECIALIST LUX (HYBRID PORTO)

Portuguese company hires for hybrid position

Location: Porto, Portugal

• ️ Only candidates already based in Portugal will be considered

Work Model: Hybrid

️ Language Requirements: French (C1 Mandatory) | English (C1 Preferred)

Seniority: Senior (6+ years)

Sector: Banking

Rate Between €4500 - 4800 RV / €2600 – 2900 CTI

• ️ Instructions: Please send your CV in English and make sure to include all skills and experience that match the requirements of the opportunity. This will significantly increase your chances of success

Shape the Future of IT Governance, Risk Management & DORA Compliance

We are looking for an experienced IT Risk & Governance Specialist to join a leading international financial services organization and play a key role in strengthening IT Governance, Risk Management, Cybersecurity Oversight, and DORA Compliance.

This is an exciting opportunity to work at the intersection of Technology, Risk, Security, and Regulatory Compliance, collaborating with local and international stakeholders to ensure the organization's IT landscape remains secure, compliant, and aligned with industry best practices.

If you are passionate about governance frameworks, risk management, cybersecurity, regulatory compliance, and driving continuous improvement within complex IT environments, we would love to hear from you.

Your Mission

As an IT Risk & Governance Specialist, you will be responsible for overseeing IT Governance processes, managing IT risks, supporting regulatory initiatives, and ensuring compliance with internal policies and external frameworks such as DORA, NIST, COBIT, ISO 31000, COSO, and ITIL.

You will act as a trusted advisor to IT leadership, helping drive governance maturity, risk awareness, and operational excellence across the organization.

Key Responsibilities

IT Governance

• Support the deployment and implementation of Group IT Governance standards, procedures, controls, and policies.
• Ensure governance documentation remains up to date and aligned with regulatory requirements.
• Assist IT managers and operational teams in implementing governance frameworks and controls.
• Monitor governance compliance levels and remediation plans.
• Contribute to the continuous improvement of the organization's IT Management System.

IT Risk Management

• Maintain and manage the IT Risk Register.
• Perform risk identification, assessment, mitigation, monitoring, and reporting activities.
• Promote IT risk awareness and strengthen risk culture across the organization.
• Support risk mapping initiatives including:
• ORSA
• RCSA
• Operational Risk Assessments
• Define and monitor Key Risk Indicators (KRIs).
• Monitor operational IT incidents and associated remediation actions.

Audit & Control Activities

• Coordinate and manage IT control campaigns.
• Review control results, supporting evidence, and remediation plans.
• Monitor internal and external audit recommendations.
• Track compliance initiatives and corrective action plans.
• Manage Shadow IT inventories and related risk assessments.

Reporting & Executive Governance

• Prepare and present reports related to:
• IT Risks
• Cyber Risks
• Governance Compliance
• Operational Resilience
• Regulatory Compliance
• Organize and support governance committees, including:
• IT Risk Committees
• Cybersecurity Committees
• IT Steering Committees
• Obsolescence Committees
• Asset Governance Committees
• Liaise with Group and Headquarters teams regarding governance and risk-related topics.

DORA Governance & Operational Resilience

• Support the deployment and operationalization of DORA requirements.
• Prepare DORA governance reports and compliance documentation.
• Review supplier and intra-group contracts to ensure DORA compliance.
• Coordinate due diligence activities and third-party risk assessments.
• Monitor outsourcing governance requirements.
• Support DORA Steering Committees and resilience initiatives.

Mandatory Requirements

Professional Experience

✔ Minimum 6 years of experience in:

• IT Risk Management
• IT Governance
• Cybersecurity Governance
• Technology Risk
• Operational Risk
• Regulatory Compliance

✔ Experience working within Financial Services, Insurance, Banking, or highly regulated industries.

✔ Experience interacting with senior stakeholders and governance committees.

Technical Knowledge

Governance & Risk Frameworks

Strong knowledge of:

• COBIT
• COSO
• ISO 31000
• ITIL
• NIST Framework
• DORA (Digital Operational Resilience Act)

IT & Cybersecurity

Good understanding of:

• IT Security Governance
• Cybersecurity Risk Management
• Operational Risk
• Third-Party Risk Management
• IT Controls
• Security Compliance
• Incident Management

Tools

• ServiceNow
• Microsoft Office Suite (Excel, PowerPoint, Word)
• Governance and Risk Reporting Tools

Nice-to-Have Qualifications

The following will be considered a strong advantage:

Certifications

• CRISC
• CISA
• CISSP
• CGEIT
• ISO 27001 Lead Implementer/Auditor
• ITIL Certification
• Risk Management Certifications

Additional Experience

• DORA implementation projects
• Insurance sector experience
• BNP Paribas environment knowledge
• Regulatory compliance programs
• Third-party and outsourcing risk management
• Cybersecurity governance programs

Why Join This Opportunity?

Join a leading international financial services organization.

Work with global stakeholders in a multicultural environment.

Play a strategic role in cybersecurity governance and operational resilience.

Gain exposure to DORA implementation and regulatory transformation initiatives.

Influence risk management, governance, and compliance strategies.

Contribute to the continuous evolution of IT and Cyber Governance frameworks.

Ideal Candidate Profile

We are looking for a governance and risk professional who combines analytical thinking, regulatory expertise, and strong stakeholder management capabilities.

The ideal candidate:

✅ Has extensive experience in IT Governance and Risk Management.

✅ Understands cybersecurity, operational resilience, and regulatory requirements.

✅ Is comfortable presenting to senior management and governance committees.

✅ Can effectively balance business objectives with risk and compliance requirements.

✅ Has excellent organizational and reporting skills.

✅ Is proactive, detail-oriented, and highly accountable.

✅ Thrives in international and multicultural environments.

✅ Demonstrates strong communication and influencing skills.

Candidate Screening Questions

Please answer the following questions when applying:

• How many years of experience do you have in IT Governance, IT Risk Management, or Cybersecurity Governance?
• Which governance and risk frameworks have you worked with (COBIT, COSO, ISO 31000, NIST, ITIL, DORA)?
• Have you managed or maintained an IT Risk Register? Please provide examples.
• What experience do you have with IT control campaigns, audits, or compliance assessments?
• Have you participated in DORA implementation or operational resilience programs?
• Describe your experience preparing reports for governance committees or executive stakeholders.
• Have you worked within Banking, Insurance, or Financial Services organizations?
• What experience do you have with ServiceNow?
• Have you managed third-party or outsourcing risk assessments?
• Which professional certifications do you currently hold?
• What is your French language proficiency level?
• What is your English language proficiency level?
• Are you available for national and international travel?
• What is your notice period or availability to start?
• What are your salary expectations?

Keywords to Include in the Resume

IT Governance, IT Risk Management, Technology Risk, Cybersecurity Governance, Information Security Governance, Operational Risk, Risk Management, Risk Assessment, Risk Register, Risk Reporting, Governance Frameworks, COBIT, COSO, ISO 31000, ITIL, NIST, DORA, Digital Operational Resilience Act, IT Controls, Compliance, Regulatory Compliance, Operational Resilience, Cyber Risk, Information Security, Cybersecurity, Third-Party Risk Management, Outsourcing Risk, Audit Management, Internal Controls, ServiceNow, Governance Committees, IT Steering Committee, Cybersecurity Committee, IT Audit, ORSA, RCSA, Key Risk Indicators, KRIs, Incident Management, Security Governance, Financial Services, Insurance, Banking, Vendor Risk Management, Regulatory Reporting, Control Framework, Continuous Improvement, IT Management System

#CI - PROC26367