Obsolescence and Vulnerability Security Risk Analyst (Banking)

Location: Porto, hybrid, with up to 3 remote days per week; candidates must have an existing legal right to work within the European Union.

Company

hirify.global provides technology and risk management services for financial institutions.

What you will do

• Communicate governance, risk management, control strategies, frameworks, and policies.
• Lead enterprise-wide technology risk and vulnerability assessments.
• Monitor infrastructure for emerging risks and collaborate with IT teams on mitigation controls.
• Provide independent oversight and challenge technology decisions against security standards.
• Prepare risk, vulnerability, and mitigation reports for senior management and stakeholders.
• Develop training and tools that strengthen risk management practices across teams.

Requirements

• At least 3 years of experience in cybersecurity or technology risk management within banking or financial services.
• Strong knowledge of technology infrastructure, vulnerabilities, and risk assessment methodologies.
• Experience with Power BI and Excel; familiarity with Splunk is beneficial.
• Knowledge of ISO 27001, NIST, COBIT, ITIL, and data protection requirements.
• Bachelor’s degree in IT, Computer Science, or a related field, with strong analytical, communication, and problem-solving skills.
• Fluent English and professional-level Portuguese are required; an existing legal right to work in the European Union is mandatory.

Nice to have

• ISO 27001, ISO 27005, CISSP, CISM, CRISC, or other cybersecurity and risk management certifications.
• Experience with vulnerability management tools and vulnerability databases.

Culture & Benefits

• Hybrid work model with up to 3 remote days per week.
• Work within an innovation-driven financial services environment.
• Exposure to senior management and diverse banking stakeholders.
• Opportunity to contribute to a mature technology risk and cybersecurity culture.