13h ago

Senior Cyber Risk and Assurance Specialist

Portugal·PortoHybridsenior

Other

0 views0 saves0 applied

Quick Summary

Overview

Build. Test. Deliver. Enjoy at Pepco! About the role At Pepco, we’re growing fast and building our Tech Hub in Porto to support our business across Europe.

Technical Tools

Other

About the Role

~1 min read

At Pepco, we’re growing fast and building our Tech Hub in Porto to support our business across Europe.

We are looking for a Senior Cyber Risk & Assurance Specialist to join our team. In this role, you will help strengthen our cybersecurity governance, risk management, compliance, and assurance practices, ensuring that security risks are effectively identified, assessed, and managed across the organisation. Working closely with business and technology teams, you will lead cyber risk and assurance activities, support regulatory compliance, and drive continuous improvement in our security processes.

If you like things simple, practical and with real ownership, you’ll fit right in.

Responsibilities

~1 min read

→Conduct complex cyber risk assessments across business and technology areas, identifying vulnerabilities, evaluating risks, and recommending mitigation strategies.
→Facilitate risk assessments and workshops, providing expert guidance on risk treatment and acceptance decisions.
→Develop risk reports, dashboards, and insights to support informed business decisions.
→Support the development and continuous improvement of information security policies, standards, and governance frameworks.
→Manage compliance activities related to ISO 27001, NIS2, PCI-DSS, GDPR, and other applicable requirements.
→Coordinate internal and external audits, assess security controls, and monitor remediation activities.
→Conduct third-party security assessments, evaluating supplier risks, security controls, and compliance documentation.
→Participate in security assurance testing, control validation, and cyber resilience exercises.
→Support security awareness initiatives, including training programmes and phishing simulations.
→Collaborate with Security Architecture, Security Operations, Internal Audit, Procurement, Legal, Privacy, and other business teams.
→Act as a senior subject matter expert, sharing knowledge with colleagues, taking ownership of specific risk and assurance areas, and supporting the Cyber Risk & Assurance Lead when needed.

Bachelor’s or Master’s degree in Cybersecurity, Information Security, IT, Risk Management, Business Administration, or a related field. Certifications such as CRISC, CISA, CISM, ISO 27001 Lead Auditor/Implementer, or PCI Professional (PCIP) are a plus.
At least 7 years of experience in cybersecurity, risk management, governance, compliance, audit, or assurance.
Proven experience conducting cyber risk assessments, evaluating security controls, and supporting compliance activities. Experience in third-party risk management or vendor security assessments is an advantage.
Strong knowledge of cybersecurity governance and risk management frameworks, including ISO 27005, NIST RMF, and enterprise risk management principles.
Good understanding of information security frameworks and standards, such as ISO 27001, NIST CSF, and CIS Controls.
Knowledge of regulatory requirements, including NIS2, GDPR, and PCI-DSS, and their practical application.
Experience supporting internal and external audits, regulatory assessments, or certification processes.
Ability to analyse technical and organisational risks and translate findings into practical business recommendations.
Experience with reporting, dashboards, and data analysis tools.
Strong analytical thinking, attention to detail, and the ability to manage multiple priorities independently.
Excellent communication and stakeholder management skills, with the ability to work effectively with both technical and non-technical teams. Previous experience in multinational, complex, or regulated environments is a plus.
Fluent English, both written and spoken. Additional languages are an advantage.

What We Offer

~1 min read

✓Hybrid model: 2 days remote / 3 days onsite

✓Office based in Porto: 📍 https://maps.app.goo.gl/Nn7hc6uYrmPiT8Fc9

✓Competitive salary and annual bonus

✓Health insurance from the month after joining

✓Meal allowance

✓Employee discount in Pepco stores in Portugal

✓Learning and development opportunities

✓International exposure and collaboration across markets

✓A simple, down-to-earth culture where people support each other

Pepco is one of Europe’s fastest-growing retail companies, with thousands of stores and millions of customers visiting us every month. Behind that growth, there’s a team of people who make things happen. We keep things simple, we focus on results, and we support each other to get there. At Pepco, no two days are the same. And that’s exactly how we like it.