IT Risk Analyst

Lisbon, Portugal | Cybersecurity | Full-time | Partially remote

Apply

Overview:

This is a position for IT Risk Analyst to perform IT Risk assessment, assess and report operational risk incidents and other IT Risk management activities as required.

What will you do?

  • Identify and assess risks under Wealth Management scope arising from existing IT assets, projects or production environment in collaboration with all stakeholders (Business, IT Domain, IT Architects, Security Architects, Third Party Risk Management, Data Office, Vendor Management, RISK functions, Legal, Compliance, etc.).
  • Produce IT risk analysis for each identified risk, identify remediation plans, and monitor and coordinate their progress according to the IT Group risk management framework.
  • Integrate IT risks into the IT GRC (Governance-Risk-Compliance) tool.
  • Identify potential IT & Cyber risk inherent in the activity based on WMIS monitoring dashboards.
  • Monitor and manage remediation for mitigation in recorded in IT Risk register.
  • Analyze or report on operational risk (RCSA, Historical Incident, Control Plans, IT Risk profiles, Risk ID frameworks).
  • Produce IT Risk reporting and indicators.
  • Assess operational risk associated with production and project incidents.
  • Ensure proper assessment of financial, legal, regulatory and compliance risks.
  • Record operational risk incident in risk tool with proper data of risk analysis.
  • Timely and accurate IT Key Risk indicator reporting to the management.
  • Provide reporting for Internal Control and Management committee.
  • Produce dashboards and presentations for the WM management and for the IT Risk, Continuity & Security committees of the department.
  • To maintain policies and procedures in line with the Cloud project governance process.
  • Assister WM ITRCS in the use of collaborative tools (SharePoint, Teams, etc.).

What are we looking for?

  • Strong knowledge of IT Risk Management with practical exposure.
  • Knowledge of Information Systems in Banking industry.
  • Knowledge of Cyber Security and Fraud.
  • Knowledge of Data Governance and Protection.
  • Familiar with IT System Development Life Cycle process and methodology.
  • Strong interpersonal and analytical skills.
  • Strong skill in data analysis.
  • Knowledge of ServiceNow GRC tool.
  • Strong English communication skills in both written and verbal.
  • High regard for confidentiality and integrity of all confidential information.
  • Familiar with regulatory requirements, concepts, trends and technologies.
  • Adaptability to handle specific management requests.
  • Bachelor’s Degree in Information Technology or equivalent qualification, with 10 to 15 years of relevant experience in areas including but not limited to IT Risk Management, IT Audit and/or IT Security.
  • Risk Management certification (e.g., ISO 31000, ISACA CRISC, etc).
  • Preference will be given to candidate with prior experience in IT Risk Management role in Banking Industry.
  • Project Management skills.
  • English 3 - Expert.

What can you expect from us?

  • A permanent job contract for a long term project;
  • Tech equipment + SIM Card + personal smartphone;
  • Health and Life Insurance;
  • Social events and team buildings;
  • The commitment of letting you grow with us, and be rewarded accordingly;
  • A dynamic and young team that will be always there to support you;
  • Training in the latest technologies;
  • Coffee, fruits, snacks and a warm welcoming when you pass by the office.