It security specialist grc

Match Profiler is an Information Systems consultant who has been working in the national and international market since 1999. We have multidisciplinary skills and IT know-how that allow us to contribute, optimize and progress with our clients. We are currently recruiting, for integration in our internal team/client, professionals with the following profile: IT Security Specialist GRC
- Hybrid (Porto
- 2 days/week) Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field 3+ years of experience in Information Security GRC Strong knowledge of security frameworks (e.g., ISO 27001, ISO27005, NIST, IEC 62443) Familiarity with regulatory requirements such as GDPR, NIS2, etc. Experience with risk management tools, compliance platforms, and security monitoring solutions Experience conducting security audits and risk assessments Understanding of IT security principles, cloud security, and network security Availability to travel, mainly in Europe Responsibilities Assist the ISO in implementing the information and cyber security strategy and program Support the development and implementation of a risk management methodology aligned with company strategy and policies Ensure alignment between information and cyber security risk management and the company risk management framework Provide guidance and support on information and cyber security risk management activities Assess the effectiveness of security controls in IT and OT environments Monitor information and cyber security risks by evaluating control implementation, asset vulnerabilities, threat landscapes, and security incidents Report risk trends to Risk Owners and other relevant committees Develop and maintain security documentation, including standards, processes, procedures, guidelines, contractual clauses, and control catalogs Design and maintain an unified IT and OT security architecture aligned with the overall security strategy Establish a security architecture repository: principles, terminology, security services, control frameworks, and reference models Support first‑line teams in identifying and addressing cyber security risks and requirements in new products, projects, processes, and services Develop and implement security education, training, and awareness programs to foster security‑conscious behaviors across IT and OT environments Provide evidence of risk oversight and control implementation for internal and external audits Communicate the status and progress of the security program to key stakeholders Monitor compliance with security architecture and standards Collect and analyze key performance and effectiveness metrics to support decision‑making and inform the ISO Good communication Team spirit Proactivity Time management What we can offer Personalized support from your team Your manager will take into consideration your motivations and suggestions Victories will be celebrated together Your HR and Support Teams will always be available to help Constant feedback on your work A network of hundreds of partnerships with companies from numerous sectors that offer you exclusive discounts (health, well‑being, travel, gastronomy, culture, leisure, training, etc.) And, of course, many gatherings and social events Seniority level Mid‑Senior level Employment type Full‑time Job function Information Technology Industries Software Development