Compliance Analyst - Lisbon/Hybrid

Description

Job Summary: A professional to monitor, interpret, and operationalize compliance requirements in Cybersecurity, Information Security, and Data Protection. Key Highlights: 1. Monitoring and interpretation of compliance requirements 2. Support for audits and change management 3. Review and updating of security policies **Description:** ---------------- Noesis is seeking professionals with the following profile: **Main Tasks and Responsibilities:** * Monitor applicable legal, regulatory, and normative requirements related to Cybersecurity, Information Security, Data Protection, and Digital Resilience. * Support the interpretation and operationalization of compliance requirements, including NIS2, EASA PART\-IS, GDPR, NIST CSF, ISO/IEC 27001, and other applicable frameworks. * Conduct regulatory compliance assessments, gap analyses, and compliance matrices, ensuring identification of deviations, provision of evidence, and mitigation action plans for identified topics. * Maintain and update compliance matrices, applicable requirements, associated controls, and respective documentary traceability. * Support Change Management processes, ensuring provision of evidence. * Support internal and external audits, regulatory inspections, and independent assessments, ensuring their preparation, evidence collection, and follow-up. * Monitor action and mitigation plans arising from audits, inspections, compliance assessments, or regulatory changes. * Support the review and updating of internal Information Security and Cybersecurity policies, procedures, standards, and guidelines. * Support contractual negotiations with suppliers regarding Information Security, ensuring agreed clauses comply with applicable regulatory scopes. * Consolidate compliance information and produce periodic reports for management, audits, and regulatory authorities. * Track legal and regulatory changes, assess impacts, and promote coordination with departments responsible for their implementation and management. * Interact with internal and external stakeholders to promote consistent implementation of compliance requirements. **Requirements:** * Relevant professional experience (implementation and/or execution of Cybersecurity/Information Security risk management programs) of at least 2 years. * Basic knowledge of Risk \& Compliance frameworks. * Knowledge of relevant standards in the field of Cybersecurity and Information Security (e.g., ISO 27001, NIST CSF). * Knowledge of Information Technologies (e.g., information systems management, application platforms, software development). * Knowledge or experience in document management, compliance evidence, and executive reporting. * Experience in regulatory analysis. * Fluent Portuguese and advanced English (spoken and written, minimum level B2\). Preferred (non-mandatory) requirements: * Bachelor’s or Master’s degree (preferably) in Law, Management, Information Technologies (e.g., Computer Science, Electrical Engineering, Telecommunications, Cybersecurity, Information Systems Management), or a related field. * Experience in Risk Management from a legal compliance perspective for the NIS Directive, GDPR, and civil aviation legislation. * Participation in audits or compliance assessments. * Experience and/or knowledge of GRC tools and risk registers. * Additional training in Compliance, Data Protection, or Information Security. * Interest in aviation regulation and operational risk. **Work arrangement:** **Hybrid (2 days per week in the office)** If you meet these criteria and wish to join an innovative organization that continuously invests in developing its talent, send us your application. **Join us. Let’s innovate together!** All our recruitment and selection processes are based on equal opportunities, valuing the competence and potential of each individual and ensuring that no candidate is discriminated against on the basis of gender, ethnicity, sexual orientation, age, religion, or physical condition. **Requirements:** -----------------