IT Risk & Cyber Engineer

• We offer the opportunity to join an international environment, participating in key initiatives regarding technological risk management, IT governance, and cybersecurity, with wide cross-functional visibility within the organization.

Join a team that drives innovation and works on high-impact projects. At Inetum, we value expertise and knowledge, and we want to help you take your career to the next level in a collaborative and dynamic environment. 

We offer the opportunity to attend, alongside the cybersecurity team, conferences, presentations, and talks at Information Security Congresses, such as Navaja Negra, RootedCON, Hacken, CCN STIC workshops, etc., as we are sponsors of many of these events. 

We place at your disposal an extensive training catalog in technological competencies and certifications according to the requirements of projects and clients. Language training, where you can choose from 12 options. Training in soft skills within the professional sphere. Use of other additional platforms such as Udemy and OpenWebinars. 

We offer you a flexible compensation package, allowing you to choose different products and model how to distribute them yourself: health insurance, meal vouchers, childcare, transport card, and training. Additionally, you will have life insurance included as part of your benefits. You will also have access to group company advantages, such as discounts on various products and services. 

The contract will be permanent, with a flexible office schedule, with the possibility of teleworking to best balance your personal and professional life. We provide stability and an excellent working environment, formed by the best professionals in the field of Cybersecurity. 

We offer an attractive career path based on experience and personal potential, within a continuously evolving company with solid growth.

• University degree in technological areas.
• Knowledge of IT risk management, cybersecurity, and technology governance.
• Knowledge of standards and frameworks such as ISO 27001, ISO 27002, ISO 31000, and the NIST Cybersecurity Framework.
• Familiarity with applicable laws and regulations: GDPR, DORA, PCI DSS, among others.
• High-level knowledge of cybersecurity solutions and controls.
• Experience or interest in IT project management, planning, and budgeting.

• ISO 27001 Lead Auditor or Lead Implementer.
• CISM (Certified Information Security Manager).
• CRISC (Certified in Risk and Information Systems Controls).

• Upper-intermediate English level, with the ability to participate in and lead meetings.
• French is a plus.

Join Inetum to participate in the technological and digital transformation of leading national and international organizations. We are committed to generating a positive impact on our clients, their processes and technology, but also on you.

We are looking for a professional with a background in Computer Engineering, Software Engineering, Cybersecurity, or related disciplines. Complementary training in Business Administration and Management (ADE) will be positively valued.

Requirements

• Main responsibilities

• Management and assessment of IT risk using GRC tools.
• Coordination and monitoring of the entity's Cybersecurity Program.
• Interaction with business, technology, and corporate teams for the identification, assessment, and mitigation of IT risks.
• Coordination of indicator campaigns (KRIs and KPIs) and monitoring of action plans.
• Preparation of executive reports and dashboards for management and committees.
• Preparation and coordination of IT Risk and cybersecurity committees.
• Support in IT audits, permanent controls, and regulatory compliance.
• Coordination of budgets, projects, and strategic planning for the IT Risk area.
• Point of contact for corporate initiatives related to technological risks and cybersecurity.

• Advanced proficiency in Microsoft Office, especially Excel.

• Ability to work independently.
• Cross-functional coordination and communication skills.
• Analytical skills and attention to detail.