Devoteam Cyber Trust | GRC Consultant (Business Continuity & Operational Security Manager) | Banking Sector
devoteam
Lisboa, , Portugal · Lisboa · Portugal
Posted May 22, 2026
- Full-time
- Hybrid
- Trust & Cybersecurity
- Mid-Senior Level
devoteam
Lisboa, , Portugal · Lisboa · Portugal
Posted May 22, 2026
Company Description At Devoteam, we believe that technology with strong human values can actively drive change for the better. Discover how Tech for People unlocks the future, creating a positive impact on the people and the world around us. We are a global leading player in Digital Transformation for leading organisations across EMEA, with a revenue of €1B. We believe in transforming technology to create value for our clients, partners and employees in a world where technology is developed for people. We are proud of the culture we have built together. We are proud of our people at the service of technology. We are proud of our diverse environment. Because we are #TechforPeople. Join our multidisciplinary team of Cloud experts, Designers, Business consultants, Security experts, Engineers, Developers and other extraordinary talents, spread across more than 20 EMEA countries. Become one of our +10.000 tech and business leaders on cloud, data and cyber security. Let’s fuse creativity with technology together and build innovative solutions that actively change things for the better. Job Description Devoteam Cyber Trust is seeking a dedicated Information Security Specialist to ensure the implementation of strategic security guidelines as defined by the second line of defence. The successful candidate will be responsible for defining and documenting contingency procedures aligned with business continuity principles, ensuring the resilience and security of our technical infrastructure. Elaborate manuals and procedures for the Systems and Telecommunications Department, ensuring alignment with Information Security Policies and validating their practical implementation. Guarantee the rigorous management and updating of implemented security control records. Participate in technical architecture reviews for the implementation of new solutions, ensuring the validation of security configurations. Ensure the implementation of security requirements in Systems and Telecommunications projects, in compliance with defined standards. Maintain the Business Continuity Plan (BCP), including prevention, response, and recovery strategies. Perform Business Continuity Plan and Disaster Recovery Plan exercises, producing reports that document results and propose improvements. Record identified incidents, risks, and deviations, ensuring the preparation and delivery of regular reports. Qualifications A Master’s degree in IT Engineering, Information Security, or a similar field. A minimum of 3 to 5 years of professional experience. Training in Cybersecurity and/or Security Management. Proven knowledge of DORA regulations and ISO 27001:2022. Formal training in ISO 22301 and business continuity management. Excellent organisational, analytical, and problem-solving skills. Strong sense of ethics, integrity, and responsibility. Excellent communication and teamwork skills. Fluency in written and spoken English required. Nice to Have: Relevant certifications such as ISO 27001, ISO 27005, ISO 22301, ISO 31000, CISSP, CISM, CRISC, CISA, or similar are highly valued. Proficiency in SpanDish. Active participation and contribution to GRC, cybersecurity, and DORA-related communities, forums, or professional networks. Additional Information The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization. All of our vacancies are open to people with disabilities.