search Browse Jobs
Cybersecurity Governance & Risk AnalystCaixa Mágica Software · Porto, Portugal
Caixa Mágica Software logo

Caixa Mágica Software

company page ↗

Cybersecurity Governance & Risk Analyst

🗓️ Posted 2026-09-09 Porto, Portugal Full-time Hybrid ICT
💰 Salary Not shared 📊 Market 2,000 EUR–3,200 EUR/mo

About the Company

We create human-oriented software Caixa Mágica Software is a Portuguese SME and a recognized leader in the open source ecosystem. Founded in 2000 as a spin-off from a university research project, we've grown into a trusted technology partner for both public institutions and private companies across Europe. Our journey began with the development of the Linux Caixa Mágica distribution, and over the years, we've expanded into embedded systems, cloud platforms, mobile and web applications and digital identity solutions. We're also the official LPI certification provider in Portugal and a consistent contributor to EU-funded research and innovation projects. With a strong foundation in open source values, we believe in building sustainable, secure and future-ready technology. Always through collaboration, transparency and innovation. Software Development Specialties: Linux, Open Source consultancy & developement, Training, Professional Services, Nearshore, Talent Augmentation, Outsourcing, IT, Web Development, Mobile Development, Cloud Development, UX/UI, AI, Machine Learning

Responsibilities

  • ● You will play a key role to develop Portugal platform, ensuring core Cyber Security activities are performed by all the entities of the Group in compliance to the Group Cyber security and IT Risk framework enabling the adequate protection of the client.
  • ● What will you do
  • ● Deploy the maturity evaluation process on the entities of your perimeter
  • ● Help the entities understand the requirements and delivers the required evidences
  • ● Evaluate the entities evidences submission in coherence with the assessments of the other entities
  • ● Communicate and inform the entities of all changes impacting them
  • ● Facilitate the relationship between the Group IT providers and the entities
  • ● Document the results of the assessments answering the reporting requested by the Governance of the program
  • ● Develop internal projects to enhance the Cyber Program evaluation process
  • ● What are we looking for
  • ● Knowledge of IT Continuity and Backups Management (including DORA requirements
  • ● Knowledge of Cryptography (key management, certificate management, CKMS )
  • ● Knowledge of Network security (micro segmentation, hardening network architectural )
  • ● Knowledge of a standard framework (NIST or equivalent)
  • ● General knowledge of IT and IT security, key related processes and regulatory framework
  • ● Knowledge of Risk Knowledge & Awareness
  • ● Fluent in English
  • ● French notions is nice to have
  • ● What can you expect from us
  • ● A permanent job contract for a long term project;