{"jobAd":{"id":"19217","type":"job_ad","attributes":{"title":"Cybersecurity Analyst - Governance, Risk and Compliance","state":10,"state_name":"published","office_cities":["Lisbon"],"location":"Lisbon, Portugal","closed_at":null,"created_at":"2025-04-23T16:18:49.895Z","company_id":8288,"updated_at":"2025-04-24T11:51:45.974Z","last_published_at":"2025-04-24T11:51:45.947Z","office_country_codes":["PT"],"relocation_paid":false,"visa_support":false,"citizenship":true,"remote_details":"","slug":"cybersecurity-analyst-governance-risk-and-compliance","project_duration":null,"location_icon":"hybridRemote","office_locations":[{"city":"Lisbon","label":"Lisbon, Portugal","country_code":"PT","google_place_id":"ChIJO_PkYRozGQ0R0DaQ5L3rAAQ","label":"Lisbon, Portugal"}],"timezone_label":null,"status_label":"Published","expires_days":null,"urls":null,"share_urls":null,"job_has_ats_offer":null,"company_has_ats":null,"country":"Portugal","waiting_counter":null,"inbox_counter":null,"review_counter":null,"waiting_new_counter":null,"inbox_new_counter":null,"review_new_counter":null,"status_color_class":"ld-status-color u-fill--puertoRico ","valid":null,"job_type":"Permanent","contractor":false,"permanent":true,"allows_remote":false,"rate":null,"salary":null,"experience_label":"Intermediate","experience_min":2,"experience_max":null,"preferred_language_label":"English","nice_to_have_language_label":"Portuguese","category":"Security","remote_working_label":"Hybrid","is_global_remote":false,"role_description":"

Damia Group is an international tech recruitment agency with 3 decades of experience.Our arrival in Portugal, 7 years later, was set on a mission to transform IT recruitment experiences and, through them, achieve better results. We believe in long-term relationships with a transparent and relaxed mindset. In a short period we have reached the hearts of both scale-ups and larger organizations by delivering spot-on curated candidate shortlists, increased job offer acceptance rates and shorter time-to-fill.

Damia handles direct hires on behalf of our clients.

About the Job:
They put people at the heart of every decision with a customer & human-first approach. They grow through an ecosystem that connects employees, customers, partners, and suppliers to create a positive impact. Fostering a unique team spirit across the 20+ countries, the environment is relaxed and informal, where everyone is treated equally. Diversity, Inclusion, and Equity are core values. They believe that recognising and celebrating differences brings greater value to our stakeholders. Innovation drives and they easily adapt to new tools in a collaborative, agile, and data-driven culture. With a flexible work policy, they emphasise autonomy, accountability, and personal growth. Everyone is a leader of their own learning and development.

Workday:

Identify, assess, and monitor cybersecurity and compliance risks;
Ensure the implementation and compliance with applicable standards and regulations (e.g., GDPR, ISO 27001, NIST CSF, NIS2);
Support internal and external audits, ensuring proper preparation and response to security findings;
Develop and maintain GRC (Governance, Risk, and Compliance) policies, standards, and frameworks aligned with market best practices;
Collaborate with internal teams to ensure the effective implementation of security controls;
Conduct periodic assessments and reviews for continuous improvement of security practices;
Define and track KPIs and metrics related to risk and compliance;
Prepare reports for management on security status and identified risks;
Participate in the definition and execution of security incident response plans;
Develop and promote security and compliance awareness programs for employees;
Promote best practices and secure behaviors within the organization;
Act as a strategic partner to IT, Legal, and Business teams in risk and compliance management;
Provide support in evaluating risks associated with suppliers and third parties

","main_requirements":"

Bachelor's degree in Information Technology, Management Informatics (or similar fields), ISO 27001, NIST, or Certified Ethical Hacker (CEH);
2 to 4 years of professional experience in cybersecurity (GRC focus), information security, or digital risk management;
Knowledge of security policies, risk management, and frameworks (ISO 27001, NIST, GDPR);
Ability to work autonomously and make decisions;
Proactivity and a strong sense of responsibility;
Excellent communication, influence, and information management skills;
Advanced level of spoken and written English.

","nice_to_have":null,"perks":null,"must_have_skills":[{"id":63058,"name":"GDPR"},{"id":769,"name":"Security"},{"id":62776,"name":"ISO 27001"}],"other_required_skills":[{"id":1329,"name":"Risk Management"}],"nice_to_have_skills":[],"referral_value":300,"referral_string":"€300","top_related_offers":[{"id":19145,"title":"Information Systems Auditor","company_name":"CGD"},{"id":19146,"title":"Information Systems Auditor Trainee","company_name":"CGD"}],"min_timezone":null,"max_timezone":null,"hiring_bonus":null,"company_name":"Damia Group Portugal"}},"bookmark":null,"handshake":null,"jobSuggestion":null,"referralId":null,"cancelReasons":["I got a more interesting proposal.","I got second feelings and I'm backing down","I just felt that Damia Group Portugal and I didn't connect.","I was never contacted.","Got tired of waiting for a final decision.","Damia Group Portugal conditions weren't good enough.","Other"],"jobSearchFiltersAb":null}

Cybersecurity Analyst - Governance, Risk and Compliance at Damia Group Portugal

GDPR

Security

ISO 27001

Job at Damia Group Portugal in ["Lisbon"]