Cybersecurity Governance Consultant
We are strengthening our team with an Cybersecurity Governance Consultant, with experience in implementing information security standards and governance practices. This role requires autonomy, analytical capability and strong methodological rigor, supporting critical projects and continuous improvement initiatives within Cybersecurity & Compliance.
Key Responsibilities:
- Support projects in the area of Information Security and Cybersecurity.
- Develop and support internal cyber awareness campaigns.
- Follow and contribute to initiatives related to security standards and frameworks, including:
- ISO 20000-1, ISO 27001, PCI DSS, SOC Type 1 / SOC Type 2
- Regulations and directives such as NIS2 and DORA
- Develop security policies, processes and procedures.
- Conduct risk assessments in the context of Information Security.
- Support and accompany internal and external audits.
- Ensure the treatment of audit findings and corresponding action plans.
- Contribute to the development of Business Continuity Plans.
- Minimum of 2 years of experience implementing standards such as ISO 20000, ISO 27001, PCI DSS, and SOC Type 2.
- Solid knowledge of Microsoft Office tools.
- Experience in developing documentation and compliance processes.
- Strong ability to analyze and structure technical information.
- Rigor, organization and ability to manage priorities effectively.
- Comfortable communicating with both technical and non‑technical teams.
- Autonomy, proactivity and a collaborative mindset.
- Critical thinking and a focus on continuous improvement.
- Workplace type: Hybrid (max. of 3 times per week in the office).
- Location: Picoas, Lisboa.