IT Risk Analyst (Cybersecurity)

Location: Hybrid in Lisbon, Portugal, 2–3 days per week. Candidates must be based in Portugal and hold Portuguese or EU citizenship, or a valid work permit.

Company

hirify.global is a technology consultancy connecting professionals with national and international clients across diverse technology sectors.

What you will do

• Identify, assess, and report IT risks within a structured IT Risk Group framework.
• Manage operational incident risks using RCSA, historical incident analysis, control plans, IT risk profiles, and risk identification frameworks.
• Prepare IT Key Risk Indicator reporting and support risk-based decision-making.
• Apply knowledge of banking information systems, cybersecurity, fraud, and data governance and protection.
• Use ServiceNow GRC and follow IT System Development Life Cycle processes and methodologies.
• Collaborate with stakeholders using analytical, data analysis, and project management skills.

Requirements

• Bachelor’s degree in Information Technology or an equivalent qualification.
• 10+ years of relevant experience in IT risk management, IT audit, and/or IT security.
• Strong practical knowledge of IT Risk Management and operational incident risk management.
• Familiarity with ServiceNow GRC and IT System Development Life Cycle processes.
• Risk Management certification such as ISO 31000 or ISACA CRISC.
• Fluent English at C1 level and availability for hybrid work in Lisbon are required.

Culture & Benefits

• Consulting work with access to national and international technology partners.
• Career coaching and personalized professional support.
• Health insurance and a Coverflex meal card.
• Welcome kit, career progression opportunities, and partner discounts.