About KLx

KLx is the Portuguese subsidiary of Crédit Agricole S.A., a large international banking group that provides IT Skills & Software Development services to the IT organizations within the group's business lines.

Our mission is to assist with the IT transformation & activities of a worldwide bank capitalizing on all the skills from our international campus in Lisbon.

About Responsibilities

The main mission will be:

As part of the local implementation of tasks defined by the Crédit Agricole Group, the CISO at KLx is responsible for the assessment of information security risks and the management of actions to reduce these risks.

Provides advice and alerts to the professions and the various necessary interlocutors and contributes with many other actors to ensure the security of IS.

Implement and manage information security governance within the defined perimeter.

• Contribute to the definition of KLx’s Information Security strategy;
• Relay the Group’s requirements and adapt them to the company’s context, when necessary;
• Provide security advice to all relevant stakeholders;
• Ensure reporting to the KLx Internal Control Committee and the Group CISO;
• Escalate alerts to General Management and the Internal Control Committee, if necessary;
• Control information security risks by assessing the security level of the company and proposing the necessary measures;
• Monitor the evolution of threats and risks to advise the business lines and influence the “Information Security” action plan;
• Steer the Information Security action plan by organizing and chairing the Information Security Committee;
• Advising on request on information security matters the business lines, the IT department teams and the Compliance and Risk department;
• Promote a culture of information security at KLx through awareness campaigns and the promotion of risk analysis practices;
• Contribute to the treatment of certain major incidents;
• Participate as necessary in crisis management;
• Examine and validate requests for derogations from security policies, have them approved if they are major by the KLx Internal Control Committee and if necessary, by the Group CISO, formalize and retain the derogations granted;
• Be informed of data breaches and participate as necessary in investigations;
• Participate also in the definition of permanent controls “Information Security” outside its perimeter, at the request of the IS Risk Manager (MRSI);
• Inform the MRSI about its activities, the results of controls, its monitoring and alert in the event of an ISS crisis management;
• Participate in the Crédit Agricole Group and Place’s “Information Security” committees and working groups;
• Contribute as necessary to Group reporting.

Who you are:

• Degree in Information Systems, Computer Science, Cybersecurity or a related field;
• Minimum of 7 years with experience in similar roles, management experience as well;
• Good knowledge of ICT at all levels;
• Proactive mindset with strong problem-solving abilities;
• Capable of balancing strategic thinking with innovation and be customer-orientated;
• Hierarchical and transversal leadership;
• Develop people and teams;
• Know how to assess the risks;
• Represent KLx within the Crédit Agricole Group;
• Excellent level of English (+B2);
• Excellent level in French (+B2).

What we Offer:

• Competitive Salary + Bonus + Flex Benefits + Health Insurance;
• Hybrid working model, allowing you to combine onsite and offsite work;
• Open Space with a lovely location next to Tejo, 5 minutes’ walk from Metro and Train Station, 15 minutes’ drive from Humberto Delgado’s airport;
• Canteen facilities (Breakfast + Lunch);
• Parking upon request (option to charge electrical cars);
• Free coffee, hot chocolate and fruits;
• Training (Hard and Soft Skills);
• International environment with more than 15 nationalities;
• A people oriented and friendly working environment.