Information Security Consultant

Description

Job Summary: Information Security Consultant to define, review, and update security policies, ensure compliance, and manage risks in collaboration with internal teams. Key Highlights: 1. Define and update information security policies 2. Ensure compliance with ISMS requirements and regulations 3. Conduct risk assessments and support implementation of mitigation measures **Job Title: Information Security Consultant** **Location: Lisbon, Portugal** **Work Mode: Full-time & Hybrid** **Responsibilities and Tasks** * Define, review, and update information security policies, processes, and procedures, ensuring alignment with business needs and industry best practices; * Ensure compliance with the company's Information Security Management System (ISMS) requirements; * Conduct regular information security risk assessments and support implementation of risk mitigation measures in collaboration with relevant stakeholders; * Develop and deliver information security awareness and training programs for all employees; * Ensure compliance with all applicable laws and regulations related to information security and data protection; * Collaborate with internal teams to ensure adherence to relevant security standards and regulatory frameworks; * Participate in security-related projects, contributing to planning, execution, and monitoring of associated tasks; * Support security evaluation of new services and software, ensuring alignment with internal security requirements; * Assist management in preparing regular reports for leadership and stakeholders on the status of information security activities. ### **Requirements** **Mandatory Requirements** * Bachelor's degree in Management, Engineering, or related field; * Minimum of 5 years of consulting experience, preferably in information security, risk management, and compliance; * Solid knowledge of relevant security standards and frameworks, including ISO 27001, ISO 27002, ISO 27701, GDPR, DORA Regulation, and NIS2 Directive; * Information security certifications (e.g., CISSP, CISM, ISO 27001 Lead Implementer/Auditor) are highly valued; * Knowledge of cybersecurity; * Experience with security tools and technologies (e.g., SIEM) and risk management platforms (e.g., GRC and TPRM systems); * Strong written and verbal communication skills in English; * Excellent verbal and written communication, interpersonal, and analytical skills; * Ability to work independently and effectively manage multiple tasks and priorities. ### **Benefits** **Important**: * Our company does not sponsor work visas or residence permits for employment purposes. All candidates must have the legal right to work in the country where the position is located. * We contact only candidates who meet the requirements and match the profile sought by our clients. **\#VisionaryFuture \- Build the future, join our living ecosystem!