Jobs in Portugal, in English.

TAP - Cyber Security Risk and Compliance Analyst

On-site in Portugal·Added 18 days ago (last checked 19 Oct)

TAP Air Portugal

2 open roles

Apply

Our summary

Work mode: On-site, Portugal
Experience: 2+ years

Skills

Nice to have

This job advert was originally written in Portuguese.

Requirements

What we're looking for

Bachelor's degree (Master's preferred) in Information Technology, Cybersecurity, Computer Engineering, Electrical Engineering, Telecommunications, Information Systems Management, or an equivalent field.
Minimum professional experience of 2 to 3 years in Risk Management, Compliance, Information Systems Audit, or Information Security.
Knowledge of Risk Management principles and methodologies, preferably applied to technological or cybersecurity environments.
Experience in performing risk assessments and defining mitigation measures.
Analytical, organizational, and technical and executive documentation preparation skills.
Ability to interact with different business areas and technical teams.
Good written and verbal communication skills in Portuguese and English.

Nice to have

Knowledge of reference frameworks and standards, namely ISO 27001, ISO 27005, NIST Cybersecurity Framework, or CIS Controls.
Experience in Information Security and Cybersecurity roles.
Experience in Governance, Risk & Compliance (GRC) activities.
Knowledge of applicable regulatory requirements, namely NIS2, GDPR, and EASA Part-IS.
Experience using GRC tools, risk management, or controls management.
Knowledge of Information Technologies (e.g., information systems management, application platforms, software development).
Relevant certifications in the area (e.g., ISO 27001 Foundation, ISO 27005 Risk Manager, Security+, ISC2 CC, CRISC, or CISA).

Pay & benefits

What you'll get

In our company, we believe that taking care of our team is as important as taking care of our passengers. Therefore, we offer a set of benefits designed so that you feel valued and supported, both inside and outside of work.

Health insurance and life insurance - ensuring protection for you and your family;
On-site cafeteria - tasty and balanced meals, without having to leave the comfort of the office;
Ease of passage according to current policy - because we believe that those who work with us deserve to explore the world;
Exclusive partnerships - special discounts to enjoy unique moments;
Career plan and continuous training - we invest in your future, with real opportunities for progression and learning programs that accompany you at every stage of your professional journey.

Here, your work gains wings... and your benefits do too!

The role

Transform risk into trust. Be part of TAP.

The Cyber Security Risk & Compliance Analyst will support the implementation, operation, and continuous improvement of TAP's Cybersecurity Risk Management and Compliance practices, contributing to the identification and mitigation of risks, as well as compliance with regulatory, normative requirements, and internal Information Security policies.

What you'll do

Participate in the execution and continuous improvement of the Information Security Risk Management program.
Support the identification, assessment, treatment, and monitoring of TAP's cybersecurity risks.
Perform risk analyses and monitor the implementation of the respective treatment plans.
Identify and monitor legal, regulatory, and normative requirements applicable to the organization (e.g., NIS2, GDPR, EASA Part-IS, ISO 27001).
Collect, analyze, and consolidate information necessary for risk management and compliance activities.
Recommend and monitor the implementation of corrective and mitigating measures resulting from risk assessments, audits, or compliance activities.
Maintain and update the cybersecurity risk register, ensuring adequate documentation and traceability of decisions.
Support and monitor audits within the context of Information Security.
Prepare documentation and evidence for audits, regulatory inspections, and certifications.
Participate in third-party risk assessment processes.
Prepare reports, dashboards, and risk and compliance presentations for different levels of the organization.
Define, monitor, and report risk and compliance indicators (KPIs, KRIs, and security metrics).
Contribute to the definition, review, and improvement of Information Security policies, standards, procedures, and controls.