Information Security & Compliance Consultant (Cybersecurity)

Location: Porto, Portugal

Company

hirify.global delivers applied AI, agentic automation, enterprise automation, process orchestration, and governed production-grade systems for enterprise clients.

What you will do

• Lead the implementation, maintenance, and continuous improvement of clients’ ISO/IEC 27001 Information Security Management Systems.
• Perform ISO 27001 gap and readiness assessments and support certification, surveillance, and internal audits.
• Advise clients on NIS2, DORA, GDPR, data protection, cybersecurity governance, ICT risk, operational resilience, and incident management.
• Conduct information security risk assessments and develop policies, procedures, risk registers, Statements of Applicability, and supporting evidence.
• Manage customer engagements, project plans, deliverables, service hours, milestones, workshops, presentations, and stakeholder coordination.
• Contribute to commercial activities including demonstrations, scope definition, effort estimation, and proposal preparation.

Requirements

• Higher education in Information Security, Cybersecurity, Information Systems, Engineering, Management, Law, or a related field.
• Hands-on experience implementing or maintaining ISO/IEC 27001 ISMS and practical knowledge of ISO/IEC 27001:2022 requirements and information security risk management.
• Demonstrable knowledge and project experience with NIS2 requirements and cybersecurity governance.
• Strong knowledge of GDPR and data protection principles, plus knowledge of DORA and ICT risk and compliance requirements.
• Experience preparing organisations for internal, certification, or surveillance audits.
• Ability to develop information security policies, procedures, risk assessments, and compliance documentation.
• Strong customer-facing and stakeholder-management skills, with the ability to manage multiple customers and projects independently.
• Good written and verbal communication skills in Portuguese and English.
• At least one recognised certification or equivalent: ISO/IEC 27001 Lead Implementer or ISO/IEC 27001 Lead Auditor.

Nice to have

• Both ISO/IEC 27001 Lead Implementer and Lead Auditor certifications.
• DPO or data protection certification and additional information security or risk certifications.
• Experience with ISO/IEC 27701 and other management system standards, particularly ISO 9001, ISO 22301, ISO 37001, or ISO 13485.
• Experience with third-party risk management, supplier assessments, due diligence, business continuity, incident response, and operational resilience.
• Experience coordinating penetration testing, vulnerability assessments, or other cybersecurity assurance activities.
• Previous consulting experience, responsibility for customer portfolios, and experience preparing commercial proposals and project estimates.

Culture & Benefits

• Autonomous and accountable work with ownership of client engagements from assessment through implementation and audit.
• Collaboration with management, technical teams, auditors, certification bodies, customers, and external specialists.
• Pragmatic, solution-oriented approach to compliance and translating complex requirements into practical customer actions.
• Equal opportunity workplace that values diversity and does not discriminate on protected characteristics.