IT Risk & Security Specialist

Chain IQ Group AG

. Identify, assess, document, and monitor IT and information security risks .

Posted 10/27/2026full-timeLisbon • PortugalMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT Risk Management and Information Security, with a strong focus on risk assessments, compliance frameworks, and security policy development. Proficient in translating technical risks into business impacts while collaborating with cross-functional teams to enhance security measures.

Highest-signal resume keywords

IT Risk ManagementInformation SecurityISO 27001CISSPRisk Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentControl ReviewsRemediation TrackingThird-Party Risk ManagementSecurity Policy DevelopmentIncident ManagementData ProtectionCloud SecurityVulnerability ManagementIdentity & Access Management

Soft Skills

Analytical SkillsCommunication SkillsStakeholder Management

Tools & Technologies

NIST Cybersecurity FrameworkCIS ControlsSOC 2

Certifications & Qualifications

CISSPCISMCRISCISO 27001 Lead ImplementerISO 27001 Lead Auditor

Industry Keywords

Information Security FrameworksGRCCompliance AssessmentsSecurity MetricsAudit Rights

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Identify, assess, document, and monitor IT and information security risks
Develop, implement, and maintain information security policies, standards, and controls
Perform IT risk and security control assessments and track remediation activities
Monitor and report key security and risk metrics, including KRIs and KPIs
Support internal and external audits, certifications, and compliance assessments
Ensure security requirements are integrated into projects, systems, and business processes throughout their lifecycle
Conduct third-party security assessments and evaluate suppliers' and service providers' security posture
Review SOC 2 reports, security questionnaires, security documentation, and related evidence
Support reviews of client and supplier contracts for information security requirements, audit rights, and incident notification obligations
Collaborate with cross-functional teams to improve the IT risk management and information security framework

Requirements

What you’ll need

Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Risk Management, or a related discipline
Minimum 3 years of experience in IT Risk, Information Security, Cybersecurity, GRC, or a similar field
Good understanding of information security and risk management frameworks, particularly ISO 27001, ISO 27002, and SOC 2
Experience conducting IT risk assessments, control reviews, risk treatment activities, and remediation tracking
Knowledge of third-party risk management and supplier security assessment processes
Experience reviewing security requirements within client contracts, security questionnaires, or due diligence processes is an advantage
Familiarity with NIST Cybersecurity Framework, CIS Controls, or similar industry standards
Understanding of Identity & Access Management, vulnerability management, cloud security, data protection, incident management, and business continuity
Strong analytical, communication, and stakeholder management skills, with ability to translate technical risks into business impact
Professional certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer/Lead Auditor are considered a plus

Benefits

Comp & perks

Dynamic and international work environment
Great Place to Work-certified employer
Opportunity to contribute to innovation, entrepreneurship, ownership, and impact
Opportunity to work with a truly global team