Risk Analyst & Permanent Control (French speaker) (Cybersecurity Governance & Risk)

Location: Hybrid in Porto, Portugal, with office attendance 2–3 times per week. Applicants must be based in Portugal and hold Portuguese or EU citizenship or a valid work permit.

Company

hirify.global is a technology consultancy connecting consultants with national and international technology-sector clients.

What you will do

• Define and promote cybersecurity risk governance frameworks across payment services and related business lines.
• Use ServiceNow and GRC tools to manage risk landscapes, corrective action plans, and control activities across ICT and non-ICT domains.
• Plan and execute operational risk assessments, including RCSA inputs, historical incident analysis, and control-plan maintenance.
• Perform root cause and impact analysis for adverse cyber risk events and prioritize remediation across complex IT environments.
• Prepare consolidated risk reports, governance documentation, alerts, and executive communications for senior stakeholders, including CISO and risk officers.

Requirements

• 3+ years of experience as a Cybersecurity Governance & Risk Manager.
• Expertise in cyber risk governance across payment services and cross-entity areas such as Cash Management, Customer Data Services, Electronic Payments, and Factoring.
• Proficiency in ServiceNow, GRC IT tooling, and Microsoft Office.
• Experience with operational risk assessments, RCSA, incident analysis, control plans, root cause analysis, and impact assessment.
• Fluency in English and French at B2 level or higher.
• Based in Portugal with Portuguese or EU citizenship, or a valid work permit; available for hybrid work in Porto 2–3 times per week.

Culture & Benefits

• Consulting work with national and international technology-sector partners across diverse industries.
• Health insurance and a Coverflex meal card.
• Welcome kit, career progression opportunities, and special discounts.
• Career coaching and support focused on professional development and well-being.