search Browse Jobs
Nearshore Sector | GRC AnalystDevoteam · Lisbon, Lisboa, Portugal
Devoteam logo

Devoteam

company page ↗

Nearshore Sector | GRC Analyst

🗓️ Posted 2026-10-15 Lisbon, Lisboa, Portugal Full-time Hybrid Banking Financial Services
💰 Salary Not shared 📊 Market 2,200 EUR–3,200 EUR/mo

About the Company

Devoteam is a AI-driven tech consulting firm specialised in cloud platforms, cyber, data, and sustainability. Tech native for almost 30 years, Devoteam guides businesses through sustainable digital transformation to deliver value. With over 11,000 tech architects in more than 25 countries across Europe, the Middle East, and Africa, Devoteam is committed to using technology to serve people. Business Consulting and Services Specialties: IT Transformation, Network Transformation, Cloud Transformation, Digital Business Transformation, Risk & Security, IT Service Excellence, Data, Business consulting, Product Design

Responsibilities

  • ● Company Description
  • ● At Devoteam, we believe that technology with strong human values can actively drive change for the better. Discover how Tech for People unlocks the future, creating a positive impact on the people and the world around us. We are a global leading player in Digital Transformation for leading organisations across EMEA, with a revenue of 1B.
  • ● We believe in transforming technology to create value for our clients, partners and employees in a world where technology is developed for people. We are proud of the culture we have built together. We are proud of our people at the service of technology. We are proud of our diverse environment. Because we are TechforPeople. Join our multidisciplinary team of Cloud experts, Designers, Business consultants, Security experts, Engineers, Developers and other extraordinary talents, spread across more than 20 EMEA countries. Become one of our +10.000 tech and business leaders on cloud, data and cyber security.
  • ● Let's fuse creativity with technology together and build innovative solutions that actively change things for the better.
  • ● Job Description
  • ● Support the implementation, maintenance, and continuous improvement of the Group Information Security Management System (ISMS) in alignment with ISO/IEC 27001, NIS2, and DORA frameworks.
  • ● Conduct comprehensive cybersecurity risk assessments and gap analyses on internal systems, applications, and architecture projects.
  • ● Drive Third-Party Risk Management (TPRM) by evaluating vendors, SaaS applications, and external partners using tools such as BitSight, OneTrust, or ServiceNow GRC.
  • ● Champion Security by Design by reviewing technical data flows, IAM/MFA requirements, and security controls during project onboarding before go-live.
  • ● Draft, review, and maintain Group security policies, procedures, and baseline documentation (PSSI) to ensure ongoing compliance.
  • ● Standardize compliance evidence collection, monitor remediation action plans, and track KPIs across all 25 country entities.
  • ● Stay ahead of emerging European regulations, assisting in risk and impact assessments for the EU AI Act and GDPR compliance.
  • ● Prepare clear, executive-level risk reports and dashboards for the Group GRC Manager and key stakeholders.
  • ● Qualifications
  • ● -3+ years of professional experience in Information Security, Cybersecurity Governance, Risk, and Compliance (GRC), or Security Auditing.
  • ● Solid understanding of core information security frameworks and European regulations, including ISO/IEC 27001, NIS2, DORA, NIST CSF, and GDPR.
  • ● Practical experience conducting risk assessments, gap analyses, and evaluating third-party vendor risks (TPRM).
  • ● Working knowledge of core technical security controls, including Identity & Access Management (IAM), Multi-Factor Authentication (MFA), encryption, and SaaS security baselines.
  • ● Exposure to GRC and vendor risk tools (e.g., ServiceNow GRC, OneTrust, BitSight) is a plus.