Senior IT Risk Analyst

Description

Summary: This IT Risk Analyst role focuses on identifying, assessing, monitoring, and reporting IT risks while supporting the IT Risk Management framework. Highlights: 1. Passionate about IT Risk Management, cybersecurity, and operational resilience. 2. Opportunity to work on IT risk assessments and remediation activities. 3. Contribute to IT Risk reporting and Key Risk Indicators (KRIs). Every moment counts. Especially those you live to the fullest. Welcome to Consort Group. For over 30 years, Consort Group has been helping companies leverage their data and infrastructure. It is backed by two leaders, Consortis and Consortia, and places people and social responsibility at the heart of its values. **This is your future team** Established in 2021, Consort Portugal supports the strategic offshoring choices of our clients, particularly in Europe, and brings our expertise in infrastructure services to the Portuguese market. With a team of around 45 employees, our Service Center based in Porto is developing a dynamic nearshore business, offering the French and European markets an environment of excellence and high potential. ##### **IT Risk Analyst** ##### **This is your mission** Are you passionate about **IT Risk Management, cybersecurity, and operational resilience**? Then this role is for you. As an **IT Risk Analyst**, you will be responsible for identifying, assessing, monitoring, and reporting IT risks, while supporting the implementation of the IT Risk Management framework across the organisation. You will work on IT risk assessments, operational risk incidents, remediation activities, risk reporting, and key risk indicators. ##### **Build side:** * Identify and assess IT risks arising from existing IT assets, projects, and production environments. * Identify potential IT and Cyber risks based on monitoring dashboards and available risk indicators. * Assess identified risks according to the Group IT Risk Management framework. * Support projects to ensure IT Risk considerations are identified and addressed throughout their lifecycle. * Analyse operational risks using frameworks and processes such as **RCSA, Historical Incidents, Control Plans, IT Risk Profiles, and Risk ID frameworks**. * Assess operational risks associated with production and project incidents. * Evaluate potential financial, legal, regulatory, and compliance risks related to operational incidents. * Support risk mitigation and remediation activities. * Adapt to specific management requests related to IT Risk activities. ##### **Run side:** * Record, monitor, review, and report identified IT risks. * Monitor remediation activities and mitigation actions related to IT Risks. * Record operational risk incidents in the relevant risk management tools, ensuring accurate risk analysis data. * Produce and maintain IT Risk reporting and indicators. * Ensure timely and accurate reporting of **IT Key Risk Indicators (KRIs)** to management. * Provide reporting for Internal Control and Management Committees. * Contribute to the monitoring of IT Risk profiles and operational risk incidents. * Maintain a high level of confidentiality and integrity when handling sensitive information. ##### **This is your background** You hold a **Bachelor's degree in Information Technology or an equivalent qualification** and have **10 to 15 years of relevant professional experience** in areas such as: * IT Risk Management * IT Audit * IT Security Experience in an **IT Risk Management role within the Banking industry** is preferred. A Risk Management certification such as **ISO 31000, ISACA CRISC, or equivalent** is also valued. ##### **This is your expertise** * Strong practical knowledge of **IT Risk Management** * Knowledge of Information Systems within the **Banking industry** * Knowledge of **Cybersecurity and Fraud** * Knowledge of **Data Governance and Data Protection** * Understanding of IT System Development Life Cycle (**SDLC**) processes and methodologies * Strong data analysis skills * Knowledge of **ServiceNow GRC** * IT Risk assessment and monitoring * Operational Risk Management * IT Risk reporting and Key Risk Indicators (**KRIs**) * Risk remediation and mitigation follow\-up * Incident Risk Management * Knowledge of regulatory requirements, concepts, trends, and technologies * Project Management skills ##### **Languages** * **English: Strong professional proficiency, both written and spoken — mandatory** ##### **This is how you work with others** * Strong interpersonal skills * Strong analytical skills * High regard for confidentiality and integrity * Attention to detail and accuracy * Ability to adapt to specific management requests * Ability to analyse and assess complex risk situations * Strong written and verbal communication skills ##### **Our commitment** At Consort Group, you are an expert we support to ensure that every assignment becomes a meaningful step in your career. * A thoughtful and people\-focused onboarding * Genuine managerial support and proximity * Continuous access to training opportunities * Concrete commitments to inclusion, equality, and solidarity * A comprehensive benefits package * A culture of feedback and meaningful projects ##### **Clear and simple** The recruitment process: * An initial phone call with our recruitment team * An HR interview and a business discussion with a Business Manager * A technical test or discussion with one of our experts * A final meeting with your future manager or project lead * And if we are a good match: we start the journey together ##### **Good to know** **Location:** Lisbon **Contract:** Permanent contract/B2B **Remote work:** Depending on the assignment **Salary:** 43k \- 53 k yearly **Job family:** IT Risk / Cybersecurity / IT Governance What you will do here, you won't do anywhere else. This moment is yours.