it security specialist grc

2 semanas atrás

Porto, Porto, Portugal Voltalia Tempo inteiro

At Voltalia we are passionate about renewable energies We are an electricity producer from wind, solar, hydro, biomass and storage and also a service provider to 3rd party clients such as Development, EPC, O&M and Distribution. Today we are in 20 countries, split among 4 continents, and offering a global operating capacity to our clients. We are listed on the regulated Euronext market in Paris since July 2014.

Our IT Security and Infrastructure Team is looking for an IT Security Specialist GRC.

The IT Security Specialist GRC (Governance, Risk, and Compliance) is responsible for overseeing governance, risk, and compliance aspects of information and cyber security. It plays a key role in promoting security best practices across VOLTALIA and requires support from Executive Committee Members, business managers, and IT leaders. Led by the Information Security Officer (ISO), this function has the following responsibilities:

Information and Cyber Security Strategy & Policy

  • Assist the ISO in implementing the information and cyber security strategy and program.

Information and Cyber Security Risk Management

  • Support the development and implementation of a risk management methodology aligned with VOLTALIA's objectives, overall risk strategy, and regulatory requirements.
  • Ensure alignment between information and cyber security risk management and VOLTALIA's enterprise risk management framework.
  • Provide guidance and support on information and cyber security risk management activities.
  • Assess the effectiveness of security controls in IT and OT environments.
  • Monitor information and cyber security risks by evaluating control implementation, asset vulnerabilities, threat landscapes, and security incidents.
  • Report risk trends to Risk Owners and other relevant committees.

Security Standards & Architecture

  • Develop and maintain security documentation, including standards, processes, procedures, guidelines, contractual clauses, and control catalogs.
  • Design and maintain a unified IT and OT security architecture aligned with the overall security strategy.
  • Establish a security architecture repository, including principles, terminology, security services, control frameworks, and reference models.

Security by Design

  • Support first-line teams in identifying and addressing cyber security risks and requirements in new products, projects, processes, and services.

Security Awareness & Training

  • Develop and implement security education, training, and awareness programs to foster security-conscious behaviors across IT and OT environments.

Audit & Compliance Support

  • Provide evidence of risk oversight and control implementation for internal and external audits.
  • Communicate the status and progress of the security program to key stakeholders.
  • Monitor compliance with security architecture and standards.
  • Collect and analyze key performance and effectiveness metrics to support decision-making and inform the ISO.

REQUIREMENTS

The ideal candidate will have/ be:

  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
  • 3+ years of experience in Information Security GRC.
  • Strong knowledge of security frameworks (e.g., ISO 27001, ISO27005, NIST, IEC 62443).
  • Familiarity with regulatory requirements such as GDPR, NIS2, etc.
  • Experience with risk management tools, compliance platforms, and security monitoring solutions.
  • Experience conducting security audits and risk assessments.
  • Understanding of IT security principles, cloud security, and network security.
  • Certifications such as CRISC, CISA, ISO 27001 Lead Auditor/Implementer, ISO 27005 Risk Manager (preferred).
  • Possible travel, mainly in Europe.

KEY SKILLS

  • Challenges-driven, rigorous, strong commitment, and investment.
  • Excellent analytical and problem-solving skills with the ability to assess and prioritize security risks.
  • Willing to develop new skills and competencies.
  • Comfortable working with high autonomy and as a team player.
  • High level of integrity and ability to handle sensitive and confidential information.
  • Very well organized. Able to manage and prioritize time and multiple tasks efficiently, especially when operating under pressure or deadlines.
  • Strong communication and collaboration skills to work effectively with cross-functional teams and external stakeholders. Know how to adapt your communication.
  • Passionate about cybersecurity and staying up-to-date on the latest threats and trends.

BUSINESS LINE
HR & Corporate Functions

CONTRACT TYPE
Not defined yet

CONTRACT DURATION

LOCATION
Portugal, Porto

STARTING DATE
Mar 25

#J-18808-Ljbffr

  • IT Security Specialist GRC

    3 semanas atrás

    Porto, Porto, Portugal Neotalent Conclusion Tempo inteiro

    Who are we:Neotalent Conclusion is one of the leading Iberian specialists providing services in Information Technology and Engineering services. As part of the Netherlands-based organization Conclusion, which has an ecosystem of over 25 companies and 3,600 employees, we are focused on increasing the technological capacity of our clients and the digital...

  • It Security Specialist Grc

    3 semanas atrás

    Porto, Porto, Portugal Voltalia Tempo inteiro

    .At Voltalia we are passionate about renewable energiesWe are an electricity producer from wind, solar, hydro, biomass and storage and also a service provider to 3rd party clients such as Development, EPC, O&M and Distribution.Today we are in 20 countries, split among 4 continents, and offering a global operating capacity to our clients.We are listed on the...

  • IT Security Specialist GRC

    3 semanas atrás

    Porto, Porto, Portugal Neotalent Conclusion Tempo inteiro

    Who are we:Neotalent Conclusion is one of the leading Iberian specialists providing services in Information Technology and Engineering services. As part of the Netherlands-based organization Conclusion, which has an ecosystem of over 25 companies and 3,600 employees, we are focused on increasing the technological capacity of our clients and the digital...

  • It Security Specialist Grc

    3 semanas atrás

    Porto, Porto, Portugal Neotalent Conclusion Tempo inteiro

    We are Neotalent Conclusion, a leading Iberian specialist in Information Technology and Engineering services. As part of the Netherlands-based organization Conclusion, we focus on increasing the technological capacity of our clients and their digital transformation.About UsWith over 25 years of experience, we have established our presence in key locations,...

  • IT Security Specialist GRC

    2 semanas atrás

    Porto, Porto, Portugal Neotalent Conclusion Tempo inteiro

    Who are we: Neotalent Conclusion is one of the leading Iberian specialists providing services in Information Technology and Engineering services. As part of the Netherlands-based organization Conclusion, which has an ecosystem of over 25 companies and 3,600 employees, we are focused on increasing the technological capacity of our clients and the digital...

  • IT Security Specialist GRC

    2 semanas atrás

    Porto, Porto, Portugal Neotalent Conclusion Tempo inteiro

    Who are we:Neotalent Conclusion is one of the leading Iberian specialists providing services in Information Technology and Engineering services. As part of the Netherlands-based organization Conclusion, which has an ecosystem of over 25 companies and 3,600 employees, we are focused on increasing the technological capacity of our clients and the digital...

  • It Security Specialist Grc

    Há 2 dias

    Porto, Porto, Portugal Voltalia Tempo inteiro

    .At Voltalia we are passionate about renewable energiesWe are an electricity producer from wind, solar, hydro, biomass and storage and also a service provider to 3rd party clients such as Development, EPC, O&M and Distribution.Today we are in 20 countries, split among 4 continents, and offering a global operating capacity to our clients.We are listed on the...

  • It Security Specialist Grc

    2 semanas atrás

    Porto, Porto, Portugal Neotalent Conclusion Tempo inteiro

    Who are we: Neotalent Conclusion is one of the leading Iberian specialists providing services in Information Technology and Engineering services. As part of the Netherlands-based organization Conclusion, which has an ecosystem of over 25 companies and 3,600 employees, we are focused on increasing the technological capacity of our clients and the digital...

  • It Security Specialist Grc

    1 semana atrás

    Porto, Porto, Portugal Neotalent Conclusion Tempo inteiro

    Who are we: Neotalent Conclusion is one of the leading Iberian specialists providing services in Information Technology and Engineering services. As part of the Netherlands-based organization Conclusion, which has an ecosystem of over 25 companies and 3,600 employees, we are focused on increasing the technological capacity of our clients and the digital...

  • IT Security Architect GRC

    1 semana atrás

    Porto, Porto, Portugal TN Portugal Tempo inteiro

    Voltalia is a dynamic and innovative company that is passionate about renewable energies. We are committed to making a positive impact on the environment while generating clean and sustainable energy.Job SummaryThe IT Security Specialist GRC (Governance, Risk, and Compliance) is responsible for overseeing governance, risk, and compliance aspects of...

  • IT Security Specialist GRC M/F

    Há 5 dias

    Porto, Porto, Portugal Voltalia Tempo inteiro

    IT Security Specialist GRC M/F At Voltalia we are passionate about renewable energies We are an electricity producer from wind, solar, hydro, biomass and storage and also a service provider to 3rd party clients such as Development, EPC, O&M and Distribution.Today we are in 20 countries, split among 4 continents, and offering a global operating capacity...

  • IT Security Specialist GRC M/F

    1 semana atrás

    Porto, Porto, Portugal TN Portugal Tempo inteiro

    At Voltalia, we are passionate about renewable energies We are an electricity producer from wind, solar, hydro, biomass, and storage and also a service provider to 3rd party clients such as Development, EPC, O&M, and Distribution. Today we are in 20 countries, split among 4 continents, offering a global operating capacity to our clients. We have been listed...

  • IT Security Specialist GRC M/F

    Há 3 dias

    Porto, Porto, Portugal TN Portugal Tempo inteiro

    At Voltalia, we are passionate about renewable energies We are an electricity producer from wind, solar, hydro, biomass, and storage and also a service provider to 3rd party clients such as Development, EPC, O&M, and Distribution. Today we are in 20 countries, split among 4 continents, offering a global operating capacity to our clients. We have been listed...

  • It Security Specialist Grc M/F

    Há 5 dias

    Porto, Porto, Portugal Tn Portugal Tempo inteiro

    .At Voltalia, we are passionate about renewable energiesWe are an electricity producer from wind, solar, hydro, biomass, and storage and also a service provider to 3rd party clients such as Development, EPC, O&M, and Distribution.Today we are in 20 countries, split among 4 continents, offering a global operating capacity to our clients.We have been listed on...

  • It Security Specialist Grc

    Há 23 horas

    Porto, Porto, Portugal Noesis Tempo inteiro

    Noesis is looking for candidates with the following profile:Main Tasks and Responsibilities: Assist the ISO in implementing the information and cyber security strategy and program; Support the development and implementation of a risk management methodology aligned with company' strategy and policies; Ensure alignment between information and cyber security...

  • GRC Security Consultant

    Há 2 dias

    Porto, Porto, Portugal Phiture Tempo inteiro

    Company ProfileNoesis is a dynamic organization dedicated to innovation and talent development. We are committed to creating an inclusive environment that values competence and potential.Job ResponsibilitiesThe GRC Security Consultant will be responsible for supporting the development and implementation of a risk management methodology aligned with our...

  • IT Security Specialist GRC

    Há 3 dias

    Porto, Porto, Portugal Noesis Tempo inteiro

    Noesis is looking for candidates with the following profile:Main Tasks and Responsibilities:Assist the ISO in implementing the information and cyber security strategy and program; Support the development and implementation of a risk management methodology aligned with company' strategy and policies; Ensure alignment between information and cyber...

  • IT Security Specialist GRC

    Há 2 dias

    Porto, Porto, Portugal Phiture Tempo inteiro

    Main Tasks And Responsibilities Noesis is looking for candidates with the following profile: Assist the ISO in implementing the information and cyber security strategy and program; Support the development and implementation of a risk management methodology aligned with company' strategy and policies; Ensure alignment between information and cyber security...

  • IT Security Specialist GRC

    Há 2 dias

    Porto, Porto, Portugal Phiture Tempo inteiro

    Main Tasks And ResponsibilitiesNoesis is looking for candidates with the following profile:1. Assist the ISO in implementing the information and cyber security strategy and program;2. Support the development and implementation of a risk management methodology aligned with company' strategy and policies;3. Ensure alignment between information and cyber...

  • Information Security Specialist GRC Professional

    Há 22 horas

    Porto, Porto, Portugal Phiture Tempo inteiro

    About the Role:We are seeking a highly skilled Information Security Specialist GRC Professional to join our team. As a key member of the ISO, you will be responsible for implementing the company's information and cyber security strategy and program.This role requires a strong understanding of security frameworks (ISO 27001, ISO27005, NIST, IEC 62443) and...