IT Risk Analyst

We are growing. And we are looking for talented people.

At Decskill, we believe that technological excellence is driven by human talent. We are an IT consulting company with more than 10 years of consolidated experience in the market, focused on building long-term relationships with both our clients and our people. Today, we are a community of over 800 professionals, working from Lisbon, Porto, and Madrid, contributing to impactful technology initiatives.

As part of the Astek Group, we combine a strong local culture with a global presence, being active in around 23 countries across 4 continents. This allows us to offer an international context, diverse challenges, and long-term career opportunities, while staying close to our teams.

We would like to meet an

IT Risk Analyst!

Responsibilities: Perform

IT Risk assessments

within the assigned scope, covering existing IT assets, projects, and production environments. Identify potential

IT and Cyber risks

based on monitoring dashboards and activity analysis. Assess identified risks according to the applicable

IT Risk Management framework . Record, monitor, review, and report identified risks. Monitor and manage

risk remediation and mitigation actions . Support projects in ensuring that

IT Risk

is properly identified, addressed, and treated. Analyze and report on

operational risk , including RCSA, historical incidents, control plans, IT Risk profiles, and Risk ID frameworks. Produce

IT Risk reporting and indicators . Assess operational risks associated with

production and project incidents . Ensure the appropriate assessment of

financial, legal, regulatory, and compliance risks . Record operational risk incidents in the relevant

risk management tool , ensuring accurate risk analysis information. Provide timely and accurate

IT Key Risk Indicator (KRI)

reporting to management. Prepare reporting for

Internal Control and Management Committees . Support the adoption of the organization's

IT Risk Management framework

within the assigned scope. Maintain a high level of

confidentiality and integrity

when handling sensitive information.

Requirements: Bachelor’s Degree in

Information Technology

or equivalent qualification. 10 to 15 years of relevant professional experience

in areas including

IT Risk Management, IT Audit, and/or IT Security . Strong practical knowledge of

IT Risk Management . Knowledge of

Information Systems within the Banking industry . Knowledge of

Cyber Security and Fraud . Knowledge of

Data Governance and Data Protection . Familiarity with

IT System Development Life Cycle (SDLC)

processes and methodologies. Strong

data analysis

skills. Strong analytical and interpersonal skills. Knowledge of

ServiceNow GRC . Risk Management certification

such as ISO 31000, ISACA CRISC, or equivalent. Previous experience in an

IT Risk Management role within the Banking industry

is valued. Project Management

skills. Familiarity with

regulatory requirements, concepts, trends, and technologies . Strong adaptability and ability to respond to specific management requests. Excellent

confidentiality and integrity

when handling confidential information. Strong

English communication skills , both written and verbal.

Are you looking for an environment that values curiosity and commitment? Here, your contribution has real impact and individual growth is taken seriously. Find with us the right opportunity to grow!

What you can expect from us Long-term projects with national and international context. Opportunities to grow technically and professionally. A people-first culture, focused on transparency and trust. Teams that value ownership, collaboration and stability. An international and multicultural working environment. Opportunities to work on

IT Risk Management, Cyber Security, Data Governance, and regulatory compliance initiatives .

Send us your CV in English to cesaltina.abreu@decskill.com with reference

“CA/ITRiskAnalyst” . Your next challenge might start here.

Join us!

At Decskill, we are committed to equal opportunities and non-discrimination. We promote a culture of diversity and inclusion, where recruitment and career progression are based solely on talent, regardless of age, gender, ethnicity, race, nationality, or any other form of discrimination incompatible with human dignity.