Devoteam Cyber Trust

Company Description Devoteam Cyber Trust is the Cybersecurity specialist arm of the Devoteam Group. With our 800+ experts located across EMEA, we aim to establish cybersecurity as an enabler of business success rather than a gatekeeper. We leverage an end-to-end approach to Cyber Resilience, Applied Security, and Managed Security services to secure the tech journey of large and medium-sized companies from all sectors and industries. Since 2009, previously known as INTEGRITY, our team based in Portugal is specialised in providing cutting-edge Managed Security Services that combine its expertise and proprietary technology to consistently and effectively reduce the cyber risk of our clients. The comprehensive service range includes Persistent Intrusion Testing, ISO 27001, PCI-DSS, GRC Consulting and Solutions, and Third-Party Risk Management. ISO Information Security) and ISO 9001 (Quality) certified, PCI-QSA, and member of CREST and CIS - Centre for Internet Security, we provide services to a considerable number of clients, operating in more than 20 countries. Job Description Mission: Structure, strengthen, and harmonize IT risk management and cybersecurity across all group entities (approximately 30), focusing on: Defining the vision and strategy for IT risk management and cybersecurity, ensuring its implementation across operational entities. Monitoring the security of information systems; Steering the IT Continuity and Resilience strategy and methodological framework. The evolvingcyber threat landscapeincreases security risks in the financial sector, making it essential to enhance cybersecurity maturity, IT risk management, and operational resilience. Key Responsibilities: Define security requirements and strategy fordata security and cryptography; Support subsidiaries in implementing data security and cryptography measures; Analyze and assess security risks, their impacts, and propose complementary measures; Participate in technical POCs for data security and cryptography solutions, including emerging technologies; Conduct technological watch and contribute to the development of the security community within the institution; Present complex security topics related to data security and cryptography to both IT and non-IT teams (e.g., Legal). Main Tasks: Assess the robustness of designs, data protection mechanisms, and keys; Define guidelines for the use of blockchain within the organization. Collaborate with the group's cryptography and data security experts; Advise on best data security techniques depending on the project (cryptography, anonymization, masking); Produce POCs on data security technologies (e.g., fully homomorphic encryption); Perform risk analysis and propose countermeasures; Define security requirements for cryptography and data security across the group; Propose approaches for inventorying cryptographic assets and crypto agility; Present security topics to different teams and stakeholders; Explain security topics from both technical and business perspectives. Qualifications Technical Skills: IT Risk and Cyber Security Risk Knowledge & Awareness Cyber security Knowledge Risk assessment: Raising awareness of ISO 27001/27005/Ebios RM or any other risk management framework Language Skills: English (mandatory) - Mastery Soft Skills: Ability to synthetize/Simplify Active Listening Ability to share/pass on knowledge Communication Skills - Oral & Written Ability to inspire others and generate commitment Ability to establish and activate networks Ability to lead a meeting, seminar, committee, seminar Additional Information The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization. All of our vacancies are open to people with disabilities. Join us in our mission to safeguard our client's critical digital assets by contributing your skills to a dedicated and expert team. Apply now to grow your career and make a tangible impact as a key member of our Cybersecurity Engineering Professional Services team