ISMS Manager (Cybersecurity)

Location: Hybrid in Lisbon, Portugal

Company

Aceve builds digital tools for electricians, plumbers, contractors, and other professionals in construction and maintenance, operating across eight countries with more than 900 employees and an AI-first approach.

What you will do

• Lead the ISMS framework across all entities in scope and maintain policy reviews, document control, evidence, and control monitoring.
• Coordinate nonconformities from logging and owner assignment through root-cause analysis, corrective action, and verified closure.
• Sample processes, conduct internal audits, validate controls, and report findings quarterly to the Cyber Security Steering Committee.
• Monitor compliance with ISO 27001, NIS2, the Cyber Resilience Act, and ISAE 3402 reports, contributing to Steering Committee, ELT, and Management Review reporting.
• Coordinate external audits and certification, onboard acquired entities into the ISMS, and answer customer security questionnaires and audits.
• Run security awareness activities, maintain the risk register, and perform supplier security risk assessments.

Requirements

• Hands-on experience running or auditing an ISO 27001 management system, including evidence, nonconformities, and audits.
• Degree in information security, IT, risk management, or a related field, or equivalent practical experience.
• Experience with ISAE 3402 or similar assurance reporting and work across multiple entities or countries.
• Ability to manage multiple deadlines across many owners and follow through until activities are closed.
• Independence to report gaps clearly, including in mature entities.
• Clear written communication for auditors, customers, and non-security colleagues.
• Pragmatic approach focused on timely, usable evidence rather than unnecessarily complex frameworks.

Culture & Benefits

• Hybrid work based in Lisbon, Portugal.
• Work in an AI-first organization with a culture centered on grit, openness, and joy.
• Collaborate across more than 40 products, 23,000 customers, eight countries, and multiple acquired entities.
• Inclusive equal-opportunity workplace with a continuous, non-discriminatory selection process.