COBIT Information Security GRC Consultant
Lisbon, Portugal · Hybrid · Freelance · Mid-level
Contexte de la mission
The consultant is required to support the Information Security & Digital Resilience team of a financial institution based in Lisbon. The consultant will be hands-on and focused on execution and delivering concrete results from day one. Working directly within the team, the role requires immediate contribution and autonomy across information security controls, DORA compliance, BAFIN and Portuguese regulatory requirements, and internal governance frameworks. The role is explicitly execution-focused and not a gap-analysis or advisory function
Objectifs et livrables
The consultant will work across four priority areas.
First, transposing the group's corporate rulebook (COBIT-based) to the local entity — not just translating language, but adapting policies to make them feasible for the local operational reality.
Second, defining and executing information security controls — going through existing controls, identifying what is missing, and ensuring full compliance with group and regulatory requirements.
Third, supporting application security by translating business requirements into non-functional security requirements to be handed over to the technology team for implementation.
Fourth, supporting the Identity & Access Management processes — joiner, leaver, mover — currently fully manual across multiple departments, establishing proper controls and improving tracking across end-to-end processes, while supporting automation efforts using available tools (Power Automate, Power BI, internal AI tools).
The consultant will also consolidate and streamline compliance evidence gathering, currently scattered across SharePoint folders and Excel sheets and managed manually, to respond efficiently to ongoing audit requests from both the group and regulators, including internal audit findings follow-up and evidence production
Profile required
• Portuguese speaker (mandatory) + English
• Familiar with COBIT (mandatory) — the corporate rulebook is COBIT-based
• Hands-on knowledge of Microsoft Power Automate and Power BI
• Around 3 years of experience
• Duration: 4-6 months to start
• Modality: Hybrid - at least 3x/week in person
• Location: Lisbon
• Start Date: Able to start immediately
Compétences demandées
Compétences
Niveau de compétence
Portuguese speaker (mandatory) + English (working level)
Confirmé
Microsoft Power Automate and Power BI
Confirmé
DORA compliance, BAFIN and Portuguese regulatory requirements knowledge
Confirmé
Familiar with COBIT (mandatory) — the corporate rulebook is COBIT-based
Confirmé
Skills: Unknown, DORA compliance, BAFIN and Portuguese regulatory requirements knowledge, COBIT (mandatory) — the corporate rulebook is COBIT-based
Apply for COBIT Information Security GRC Consultant on Cyberr