Internal Control Consultant (Information Security)

Location: Porto, Portugal — hybrid

Company

hirify.global provides a development center in Porto and administrative support in Lisbon for projects delivered by multicultural teams across European cities.

What you will do

• Perform design and operating effectiveness testing of key ICT controls against internal policies, governance frameworks, and regulatory requirements.
• Review control evidence, conduct walkthroughs with first-line control owners, and validate control implementation and execution.
• Prepare workpapers, testing reports, findings, recommendations, management reporting, and governance committee materials.
• Follow up on remediation actions and contribute to the continuous improvement and maturity of the Internal Control Framework.
• Engage with business, technology, and support-function stakeholders to facilitate second-line testing activities.

Requirements

• Experience in internal controls, internal audit, risk management, compliance, information security, or external audit.
• Strong understanding of internal control frameworks and governance principles, including COSO.
• Hands-on experience assessing and testing controls against standards and regulations such as ISO 27001, ISO 22301, NIST Cybersecurity Framework, CIS Controls, DORA, or NIS2.
• Experience with control testing, evidence reviews, walkthroughs, control assessments, and drafting reports with clear findings and recommendations.
• Strong analytical, communication, and stakeholder management skills.
• English and Portuguese required.

Culture & Benefits

• Health insurance.
• Personalized training plan with a dedicated training budget.
• Remote onboarding process and regular professional feedback.
• Team events every semester.
• Partner discounts and a culture focused on proximity and transparency.