Information Technology Risk Manager

Mutual Respect, Empathy, Innovation, and Professional Pride. Do you see yourself within these values?

Founded in 2006 with the mission "To Challenge Complexity", Closer Consulting is a Data Science company specializing in Business Intelligence, Advanced Analytics, and Artificial Intelligence.

Developing projects in the most diverse industries – Banking, Telecommunications, Healthcare, Retail, Energy, Insurance, and Aviation, among others –, we have created an environment where the brightest enquiring minds feel at home, providing our people with the means, opportunities and support they need to thrive and innovate.

We are seeking a skilled IT Risks & Governance Specialist to take on new challenges in a hybrid work model in Porto.

Key Responsibilities

1. IT Governance Implementation & Oversight

• Deploy and break down global IT governance frameworks (procedures, rules, controls, and requirements), ensuring full documentation.
• Support IT managers and operational teams in adapting governance rules to the local entity context, identifying key controls, and refining procedures.
• Monitor compliance levels against Group standards and track remediation plans for any non-compliance.
• Assist the CIO in organizing and preparing quarterly IT Steering Committees.
• Maintain and update procedures to align with evolving organizational governance.

2. IT Risk Management

• Promote an IT risk culture across the organization and maintain the central IT risk register.
• Ensure regular review of IT risks and manage risk tracking sheets within ServiceNow.
• Manage control campaigns (e.g., annual GKSP BI), monitor action plans, and track operational incidents.
• Feed IT-related risk inputs into broader frameworks (e.g., ORSA, RCSA) and establish Key Risk Indicators (KRIs) where required.
• Maintain an active inventory of Shadow IT and oversee IT audit recommendations.
• Organize and present quarterly IT Risk & Cyber Committees covering KPIs, internal audit recommendations, obsolescence, incident history, and outsourcing risks.

3. DORA Governance & Regulatory Deployment

• Lead the monitoring, deployment, and local reporting required under the DORA (Digital Operational Resilience Act) framework.
• Conduct reviews of intragroup and third-party vendor contracts to guarantee DORA compliance clauses.
• Implement specific DORA governance requirements (e.g., supplier due diligence, specific service deployments).
• Establish and lead DORA steering committees alongside internal entities and subcontractors.

4. Reporting & Stakeholder Management

• Produce high-quality reporting on IT risks and governance for local management, business units, and corporate headquarters.
• Act as the primary liaison between local teams and centralized corporate governance functions.
• Consolidate and manage the remediation portfolio for identified IT risks, obsolescence, and non-compliance issues.

Technical & Professional Expertise

• Domain Experience: Background in the Financial Services or Insurance sectors.
• Frameworks & Standards: Strong practical knowledge of IT governance and risk methodologies (e.g., DORA, NIST, ISO 31000, COBIT, COSO, ITIL).
• Tools: Proficiency in ServiceNow (for risk and control management) and Advanced MS Office (Excel, PowerPoint).

Languages

• French: C1 Level / Fluent (Mandatory).
• English: C1 Level / Fluent (Highly Valuable).

Additional Requirements

• Travel: Willingness and flexibility to travel both within Portugal and internationally as required.

If you believe in this match as much as we do, send us your CV to [email protected] and reach the closer side of life.

Closer is a company that values diversity and inclusion. We are committed to fostering an environment where everyone is treated with dignity and respect, regardless of race, gender, beliefs, sexual orientation, physical or mental disability, or other personal characteristics.

At Closer, we embrace the unique perspectives and experiences that everyone brings, and we believe that it is a fundamental driver for the success we've achieved.