Adecco Permanent Recruitment is currently hiring a Security Risk Officer on behalf of a leading financial institution undergoing a continuous journey of technological transformation, resilience, and risk governance enhancement.

This is an excellent opportunity to join a highly visible team within the First Line of Defense (LoD1), contributing to the identification, assessment, monitoring, and mitigation of technology risks while working closely with IT teams, senior management, and key business stakeholders.

The Role

As a Security Risk Officer, you will play a critical role in strengthening the organization's Technology Risk Management framework, ensuring that technological risks are effectively identified, assessed, communicated, and mitigated. You will contribute to the development of governance practices, risk reporting capabilities, and regulatory compliance initiatives within a complex and highly regulated environment.

Key Responsibilities

• Promote and communicate technology risk governance frameworks, policies, controls, and internal standards across the organization.
• Identify, assess, quantify, and prioritize technology risks, including cybersecurity threats, data breaches, system failures, and operational vulnerabilities.
• Monitor and analyse the organization's technology landscape to identify emerging risks and security vulnerabilities.
• Develop and maintain technology risk management frameworks, policies, methodologies, and procedures.
• Prepare and present risk reports, dashboards, metrics, and executive-level summaries for senior management and key stakeholders.
• Provide independent oversight and effective challenge to IT teams regarding risk management activities and mitigation plans.
• Ensure compliance with applicable regulatory requirements, industry standards, and cybersecurity best practices.
• Collaborate with technology teams to design and implement risk mitigation strategies and controls.
• Support Business Analysis activities for the internal Asset Management platform, including requirements gathering, backlog prioritization support, and User Acceptance Testing (UAT).
• Develop dashboards and reporting capabilities using Power BI to support risk monitoring and technology obsolescence initiatives.
• Support third-party technology risk reviews and follow up remediation activities with relevant stakeholders.
• Promote a strong risk-aware culture through training, guidance, and stakeholder engagement initiatives.

What We're Looking For

• Bachelor's degree in Computer Science, Information Technology, Information Security, Engineering, or a related field.
• Minimum of 5 years of experience in Technology Risk Management, Information Security, IT Governance, or similar functions.
• Proven experience within banking, financial services, or other highly regulated environments.
• Strong understanding of technology infrastructures, cybersecurity principles, and risk assessment methodologies.
• Knowledge of regulatory requirements and industry frameworks related to technology risk management.
• Advanced proficiency in Power BI and Microsoft Excel.
• Strong analytical, problem-solving, and critical-thinking capabilities.
• Excellent communication skills with the ability to engage effectively with technical teams, business stakeholders, and senior management.
• Proactive, results-oriented, and collaborative mindset.
• English level B2 or above.

Nice to Have

• Experience working with Splunk.
• Knowledge of COBIT and ITIL frameworks.
• Professional certifications such as ISO 27001, ISO 27005, CISSP, CISM, or CRISC.
• Experience supporting supplier or third-party technology risk management initiatives.
• Exposure to cybersecurity governance, operational resilience, and regulatory compliance programs.
• Experience developing executive dashboards and risk reporting solutions.

What's on Offer

• Opportunity to join a leading financial institution with a strong focus on technology, cybersecurity, and risk management.
• Exposure to strategic technology risk initiatives with direct visibility to senior stakeholders.
• Participation in large-scale transformation and governance projects.
• Professional development and certification support.
• Collaborative and dynamic working environment.
• Competitive compensation and benefits package.
• Hybrid working model based in Lisbon.

If you are passionate about technology risk, cybersecurity governance, and helping organizations build resilient and secure technology environments, we would love to hear from you.