Cybersecurity Risk Analyst (Financial Services)

Location: Porto, Portugal; hybrid work with up to 3 remote days per week. Candidates must already have the legal right to work in the European Union.

Company

hirify.global provides technology and consulting services for organizations in regulated and financial-services environments.

What you will do

• Report technology risks, vulnerabilities, mitigation progress, and control effectiveness to stakeholders and senior management.
• Develop and maintain technology risk management frameworks, policies, and procedures.
• Assess risk likelihood and impact, prioritize mitigation strategies, and monitor emerging threats across infrastructure and systems.
• Collaborate with IT teams to implement security measures and controls.
• Promote technology risk awareness through training, tools, and guidance for staff.
• Maintain risk documentation and ensure activities align with applicable regulations and industry standards.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Experience in technology risk management within banking or financial services; candidates with no prior experience are also welcome.
• Strong understanding of security principles, risk assessment methodologies, and technology infrastructure.
• Knowledge of ISO 27001, NIST, and relevant regulatory requirements.
• Experience with Power BI and Excel.
• Fluent English at minimum B2 level and an existing legal right to work in the European Union.

Nice to have

• Knowledge of Splunk, COBIT, or ITIL.
• ISO 27001, CISSP, CISM, or CRISC certification.

Culture & Benefits

• Hybrid work model with up to three remote days per week.
• Opportunity to work on cybersecurity and operational resilience in the financial-services sector.
• Professional growth in an evolving cybersecurity environment.
• Collaboration with technical teams, stakeholders, and senior management.