Cyber Governance Officer

Decskill was founded in 2014 as an IT Consulting Company and their main mission is to delivery value through the knowledge. We enable companies to meet the chalenges of digital world by providing our clients with business models that ensure technological capacity, flexibility and agility. We are more than 500 consultants with offices in Lisbon, Porto and Madrid.

DECSKILL operates in 3 main areas:

• DECSKILL TALENT, through which we provide our clients with an extension to their IT teams;

• DECSKILL BOOST, through which we provide our client with software development models to increase capacity and optimize Time-to-Market, where we create and manage teams that deliver according to their needs, at the desired speed;

• DECSKILL CONNECT through which we provide our client with consulting services, as well as the implementation and management of information technology infrastructures.

Our practice results in the creation of value for our customers, either by delivering qualified and value-added services, or through highly qualified and motivated professionals, as well as technology solutions that allow us to operate and transform the business of our customers.

We are looking for Cyber Governance Officer!

Responsibilities:

• Ensure the entity conformity with all relevant cybersecurity regulations and frameworks (ISO, NIST, DORA…).
• Ensure the entity conformity with all internal cyber policies and process.
• Define IT security policies within the scope.
• Monitor the formalization of cyber controls.
• Follow ongoing entity conformity actions.
• Perform a reporting of entity conformity level to the top management.
• Raise awareness among employees on security practices and conformity rules.

Requirements:

• Rules & norms (Knowledge of regulatory standards, ability to translate them into internal policies).
• Regulatory (general knowledge in IT and cybersecurity regulators framework).
• Control (Ability to verify operations, ensure that the procedures are being followed…).
• Cybersecurity (general knowledge in cybersecurity risks, frameworks and requirements).
• Risk opinion (ability to challenge, approve and decide (new activities, projects…).
• IT knowledge (global knowledge of IT, its major processes and assets & solutions).
• Business/IT Relationship (ability to understand business needs).
• Proven track in Cybersecurity (5 years minimum).
• Knowledge in ISO27001 & NIST.
• Previous experience in strategy and governance is appreciated.
• ISO 27001lead auditor or lead implementor certification.
• ISO 27005 Risk management certification.
• NIST framework.
• Microsoft office (Excel, Macro, PowerPoint).
• Fluency in the english language.

If you’re interested in this job please send your CV in to [email protected] or [email protected] with the reference “CA/CyberGovernanceOfficer".

Thank you! :D

Decskill is committed to equality and non-discrimination with all our talents. We recruit and promote talent, based on diversity and inclusion, regardless of age, gender, ethnicity, race, nationality or any other form of discrimination incompatible with the dignity of the human being.