IT Risk Specialist (French Speaker)

We are looking for an experienced IT Risk Specialist (French Speaker) to join a team responsible for IT risk governance, third-party risk management, cloud risk assessments, and regulatory compliance initiatives. You will play a key role in supporting risk management processes, monitoring cloud-related controls, ensuring compliance with regulatory requirements, and collaborating with multiple stakeholders to strengthen the organization's IT risk framework.

Work Model: Hybrid (2–3 days per week in the office – Porto)

Key Responsibilities

• Coordinate cloud solutions assessment activities and related deliverables.
• Track and report the progress of cloud documentation and risk assessments.
• Maintain high-quality data related to IT third parties within governance and risk management tools.
• Support Third-Party IT Risk Management (TPTRM) processes and controls.
• Monitor and follow up on IT risk topics including Key Risk Indicators, obsolescence, shadow IT, permanent controls, and risk quality metrics.
• Support risk management activities related to cloud solutions and third-party suppliers.
• Monitor recommendations, remediation plans, and historical incidents.
• Support procurement and supplier management activities to ensure compliance with regulatory requirements.
• Assist with Supplier Due Diligence assessments, security reviews, and contractual remediation processes.
• Coordinate governance activities and steering committees related to third-party risk management.
• Prepare reports, risk documentation, and governance deliverables for stakeholders.

Required Skills & Experience

• At least 2 years of experience in IT Risk, IT Governance, Cybersecurity, or related areas.
• Good understanding of IT risk management frameworks and processes.
• Experience working with ServiceNow GRC or similar governance, risk, and compliance platforms.
• Knowledge of DORA (Digital Operational Resilience Act).
• Knowledge of ISO 27001 and information security best practices.
• Basic knowledge of cloud technologies and cloud risk management principles.
• Strong proficiency with Microsoft Excel and Microsoft Office tools.
• Ability to coordinate meetings, facilitate discussions, and manage multiple stakeholders.
• Strong analytical, organizational, and reporting skills.
• Ability to deliver high-quality work while meeting deadlines.
• Attention to detail and adherence to established procedures and methodologies.
• Fluent French is mandatory.
• Professional proficiency in English is highly valued.

If you're passionate about IT Risk, governance, regulatory compliance, and third-party risk management, we'd love to hear from you.