Information Security Consultant - Lisbon

Inetum is a European leader in digital services, supporting organizations as they navigate continuous technological change. The company helps clients accelerate their digital transformation through a broad portfolio that includes consulting, application services, digital engineering, cloud, cybersecurity, platforms, and infrastructure services

We are seeking an Information Security Consultant to support security governance, compliance, risk management, and cybersecurity initiatives across the organization. The ideal candidate will have proven experience in implementing internationally recognized security standards and regulatory frameworks, as well as a strong background in information security risk management and cyber awareness programs.

Key Responsibilities

• Support and deliver projects related to Information Security and Cybersecurity.
• Lead and contribute to the implementation of security frameworks, standards, and regulatory requirements.
• Develop and support cybersecurity awareness and training campaigns across the organization.
• Define, review, and maintain Information Security Policies, Processes, and Procedures.
• Conduct Information Security Risk Assessments and support risk treatment initiatives.
• Collaborate with business and technical teams to ensure compliance with security requirements and best practices.
• Provide security consulting and advisory services to internal stakeholders.
• Support continuous improvement of information security governance and compliance programs.

Professional Experience

• Proven hands-on experience in the implementation of security standards, frameworks, and compliance programs.
• Experience working on Information Security and Cybersecurity projects within corporate environments.

Mandatory Technical Skills

• Demonstrated experience implementing and maintaining:
  • ISO 27001
  • ISO 20000-1
  • PCI DSS
  • SOC 1 (Type I and Type II)
  • SOC 2 (Type I and Type II)
• Experience with regulatory and compliance frameworks, including:
  • NIS2 Directive
  • DORA (Digital Operational Resilience Act)

Core Competencies

• Information Security Governance
• Cybersecurity Risk Management
• Security Policies, Processes, and Procedures Development
• Security Compliance and Auditing
• Risk Assessment and Risk Treatment
• Cybersecurity Awareness and Training
• Security Framework Implementation