It Risks Specialist Lux

IT RISKS SPECIALIST LUX (HYBRID PORTO)
Portuguese company hires for hybrid position
Location: Porto, Portugal
️ Only candidates already based in Portugal will be considered
Work Model: Hybrid
️ Language Requirements: French (C1 Mandatory) | English (C1 Preferred)
Seniority: Senior (6+ years)
Sector: Banking
Rate Between €*** RV / €*** CTI
️ Instructions: Please send your CV in English and make sure to include all skills and experience that match the requirements of the opportunity. This will significantly increase your chances of success
Shape the Future of IT Governance, Risk Management & DORA Compliance
We are looking for an experienced
IT Risk & Governance Specialist
to join a leading international financial services organization and play a key role in strengthening IT Governance, Risk Management, Cybersecurity Oversight, and DORA Compliance.
This is an exciting opportunity to work at the intersection of Technology, Risk, Security, and Regulatory Compliance, collaborating with local and international stakeholders to ensure the organization's IT landscape remains secure, compliant, and aligned with industry best practices.
If you are passionate about governance frameworks, risk management, cybersecurity, regulatory compliance, and driving continuous improvement within complex IT environments, we would love to hear from you.
Your Mission
As an IT Risk & Governance Specialist, you will be responsible for overseeing IT Governance processes, managing IT risks, supporting regulatory initiatives, and ensuring compliance with internal policies and external frameworks such as DORA, NIST, COBIT, ISO *, COSO, and ITIL.
You will act as a trusted advisor to IT leadership, helping drive governance maturity, risk awareness, and operational excellence across the organization.
Key Responsibilities
IT Governance
Support the deployment and implementation of Group IT Governance standards, procedures, controls, and policies.
Ensure governance documentation remains up to date and aligned with regulatory requirements.
Assist IT managers and operational teams in implementing governance frameworks and controls.
Monitor governance compliance levels and remediation plans.
Contribute to the continuous improvement of the organization's IT Management System.
IT Risk Management
Maintain and manage the IT Risk Register.
Perform risk identification, assessment, mitigation, monitoring, and reporting activities.
Promote IT risk awareness and strengthen risk culture across the organization.
Support risk mapping initiatives including:
ORSA
RCSA
Operational Risk Assessments
Define and monitor Key Risk Indicators (KRIs).
Monitor operational IT incidents and associated remediation actions.
Audit & Control Activities
Coordinate and manage IT control campaigns.
Review control results, supporting evidence, and remediation plans.
Monitor internal and external audit recommendations.
Track compliance initiatives and corrective action plans.
Manage Shadow IT inventories and related risk assessments.
Reporting & Executive Governance
Prepare and present reports related to:
IT Risks
Cyber Risks
Governance Compliance
Operational Resilience
Regulatory Compliance
Organize and support governance committees, including:
IT Risk Committees
Cybersecurity Committees
IT Steering Committees
Obsolescence Committees
Asset Governance Committees
Liaise with Group and Headquarters teams regarding governance and risk-related topics.
DORA Governance & Operational Resilience
Support the deployment and operationalization of DORA requirements.
Prepare DORA governance reports and compliance documentation.
Review supplier and intra-group contracts to ensure DORA compliance.
Coordinate due diligence activities and third-party risk assessments.
Monitor outsourcing governance requirements.
Support DORA Steering Committees and resilience initiatives.
Mandatory Requirements
Professional Experience
✔ Minimum 6 years of experience in:
IT Risk Management
IT Governance
Cybersecurity Governance
Technology Risk
Operational Risk
Regulatory Compliance
✔ Experience working within Financial Services, Insurance, Banking, or highly regulated industries.
✔ Experience interacting with senior stakeholders and governance committees.
Technical Knowledge
Governance & Risk Frameworks
Strong knowledge of:
COBIT
COSO
ISO *
ITIL
NIST Framework
DORA (Digital Operational Resilience Act)
IT & Cybersecurity
Good understanding of:
IT Security Governance
Cybersecurity Risk Management
Operational Risk
Third-Party Risk Management
IT Controls
Security Compliance
Incident Management
Tools
ServiceNow
Microsoft Office