Cybersecurity and Technology Risk Analyst (Banking Sector)

Location: Porto, hybrid work with up to 3 remote days per week; candidates must already have the legal right to work in the European Union.

Company

hirify.global provides technology and consulting services, placing professionals with clients in the banking and financial services sector.

What you will do

• Develop and maintain technology risk management frameworks, policies, procedures, and controls.
• Analyze internal asset management tools, manage production features and tickets, and support user acceptance testing with product owners.
• Create obsolescence reports and dashboards using Power BI and Excel.
• Assess first-line technology risks related to third-party vendors and support risk follow-up and closure.
• Monitor emerging technology risks, vulnerabilities, regulatory requirements, and cybersecurity controls across the bank.
• Report risks, vulnerabilities, and mitigation measures to senior management and advise staff on risk management practices.

Requirements

• At least 3 years of experience in technology risk management within banking or financial services.
• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Experience with cybersecurity, IT risk assessment, control frameworks, technology infrastructure, and security principles.
• Hands-on experience with Power BI and Excel.
• Familiarity with COBIT and ITIL, plus strong analytical, problem-solving, and stakeholder communication skills.
• Fluent English at minimum B2 level and Portuguese are required; candidates must have existing EU work authorization.

Nice to have

• Knowledge of Splunk.
• ISO 27001, ISO 27005, CISSP, CISM, CRISC, or other cybersecurity and risk management certifications.
• Knowledge of cybersecurity and technology risk regulatory requirements.

Culture & Benefits

• Hybrid work model with up to three remote days per week.
• Opportunity to work on digital trust, financial security, and regulatory compliance for a banking client.
• Collaboration with IT teams, product owners, risk specialists, and senior stakeholders.