Cyber Security Program Analyst

We are looking for a Cyber Security Program Analyst to join an international cybersecurity team responsible for assessing and improving cyber resilience, security maturity, and IT risk management practices across multiple global entities.

This is an excellent opportunity for professionals looking to expand their expertise across a wide range of cybersecurity domains while contributing to a strategic and highly visible cybersecurity transformation program.

Hybrid – Porto (2 to 3 days per week on-site)

Key Responsibilities

• Conduct cybersecurity maturity assessments across different business entities.
• Support stakeholders in understanding cybersecurity requirements and assessment expectations.
• Review and evaluate submitted evidence against established cybersecurity standards and controls.
• Ensure consistency and accuracy across assessments performed within the program.
• Communicate framework updates, requirements, and key cybersecurity developments to relevant stakeholders.
• Facilitate collaboration between central IT providers and business entities.
• Produce assessment documentation, reports, and governance-related deliverables.
• Contribute to continuous improvement initiatives aimed at enhancing the cybersecurity evaluation process.
• Work closely with cybersecurity experts and stakeholders across multiple countries and business areas.

Required Skills & Experience

• Experience in Cyber Security, Information Security, IT Risk, IT Governance, or related areas.
• Understanding of cybersecurity frameworks such as NIST or equivalent standards.
• Knowledge of IT security principles, risk management, and regulatory requirements.
• Familiarity with cybersecurity governance and compliance activities.
• Awareness of operational resilience and cyber risk management concepts.
• Knowledge in one or more of the following areas:
• IT Continuity, Disaster Recovery, and Backup Management (including DORA requirements).
• Cryptography, Key Management, Certificate Management, or CKMS.
• Network Security, Hardening, Segmentation, and Security Architecture.
• Strong analytical and communication skills.
• Ability to engage with multiple stakeholders in an international environment.
• Professional proficiency in English.