IT Risk Analyst and Reporting Manager Porto

IT Risk Analyst and Reporting Manager
Porto
Porto, Porto District, Portugal

IT Risk Analyst and Reporting Manager, Porto

Client:

ALTER SOLUTIONS

Location:

Porto, Portugal

Job Category:

Other

EU work permit required:

Yes

Job Reference:

645aa928b6ec

Job Views:

15

Posted:

23. 01. 2025

Expiry Date:

09. 03. 2025

Job Description:

Main Responsibilities:

• Maintain cloud cybersecurity risk cartography:
• Follow-up data quality and comprehensiveness in cloud assets referential (Cloud Register) and cloud risks referential (cloud risks in the Risk Register) in Service
  Now tooling.
• Build, improve and provide risk reporting templates using Service
  Now or an external tool (such as Tableau).
• Provide periodic cloud risk reporting.
• Active role in the preparation of quarterly cloud risk committees.
• Understand risk assessments already produced (based on ISO 27005/EBIOS Risk Manager) and impacts of remediation plans progress on risks.
• Skills to follow up/challenge remediation plans implemented by service providers or entities.
• Contribute actively in risk assessments of cloud platforms and cloud applications.
• Ideally, skills to lead risk assessments following ISO 27005/EBIOS Risk Manager methods.

Other Activities:

• Contribute in (cloud) third parties onboarding studies (risk assessment, review of case studies, …).
• Contribute to governance/organization topics on
  - party cases.
• Contribute to governance/organization topics related to the team.
• Contribute to
  - up of
  - party governance in run.

Technical Skills:

• Certification ISO 27001.
• Knowledge of a risk management tool such as Service
  Now or reporting tool such as Tableau.
• Knowledge on Cloud specific Cyber Security (such as SOC2, CSA, ISO27017).
• Knowledge on Cyber Security control frameworks (such as NIST, CIS).
#J-18808-Ljbffr