CyberProgram Analyst em Porto, Portugal

Job Description We are looking for a Cyber Security Program Analyst to join a global cybersecurity transformation initiative focused on strengthening cyber resilience, IT risk management, and operational resilience across multiple international entities. This role sits within a Group Cyber Security Program team responsible for driving cybersecurity maturity, harmonizing security practices, and ensuring compliance with internal frameworks and regulatory requirements. You will work in a highly collaborative and international environment, interacting with cybersecurity experts, risk professionals, and stakeholders across different business entities. The position offers a unique opportunity to gain exposure to a broad range of cybersecurity domains, contribute to strategic initiatives, and play an active role in improving the organization's overall security posture.

Key Responsibilities

• Support the deployment and execution of cybersecurity maturity assessments across assigned entities.
• Guide stakeholders in understanding cybersecurity requirements and gathering the necessary evidence for compliance reviews.
• Review and assess submitted evidence, ensuring consistency and alignment with established evaluation standards.
• Maintain regular communication with stakeholders regarding framework updates, changes, and remediation expectations.
• Act as a liaison between centralized IT providers and local entities to facilitate cybersecurity initiatives.
• Document assessment results and contribute to governance reporting and management dashboards.
• Participate in the continuous improvement of assessment methodologies, processes, and tooling.
• Support strategic initiatives designed to enhance cybersecurity maturity and operational resilience across the organization.

Why Join This Team?

• Be part of a large-scale cybersecurity transformation program with strategic visibility.
• Collaborate with cybersecurity specialists and stakeholders across multiple countries and business areas.
• Develop expertise across a wide range of cybersecurity, IT risk, and resilience domains.
• Gain valuable exposure that can support future career growth toward roles such as Cyber Security Manager, CISO, IT Risk Manager, Program Manager, or Cyber Security Specialist .

Profile

Required

• General knowledge of Cyber Security, IT Risk Management, and Information Security principles .
• Understanding of IT processes, security controls, and governance frameworks.
• Familiarity with risk management concepts and regulatory compliance requirements.
• Strong analytical and critical-thinking skills.

Preferred

• IT Continuity, Disaster Recovery, and Backup Management , including regulatory requirements such as DORA.
• Cryptography , including key management, certificate management, and cryptographic governance.
• Network Security , including network segmentation, hardening, and secure architecture principles.
• Security frameworks and standards such as NIST , ISO 27001, CIS Controls, or equivalent.
• Operational Resilience and Cyber Risk Management programs.

Languages

• English: Fluent / Professional Proficiency (mandatory)
• French: Basic knowledge (nice to have)