IT Risk analyst & Permanent Controller

Decskill, founded in 2014 as an IT Consulting Company, places paramount importance on its greatest asset: its people. Our main mission is to deliver value through knowledge and talent, and we achieve this by fostering a culture of excellence and investing in the development and well-being of our people. With over 600 dedicated professionals and offices in Lisbon, Porto, Madrid, and Luxembourg, Decskill operates across three core areas:

• DECSKILL TALENT : We believe that our people are key to our success. Through Decskill Talent, we empower our team to embrace the digital transformation challenges of our clients. We collaborate with clients to drive innovation, ensuring project success and business growth.
• DECSKILL BOOST : Equipping our team with the latest tools and methodologies, we optimize Time-to-Market and deliver innovative solutions exceeding client expectations.
• DECSKILL CONNECT : Our team collaborates closely with clients to implement and manage IT infrastructures that generate long-term value.

At Decskill, we believe that by nurturing and empowering our people to confront the challenges of digital transformation, we create value not only for our clients but also for our entire ecosystem, fostering a digital community dedicated to growth and progress.

We are looking for an IT Risk analyst & Permanent Controller !

Responsibilities :

• Define and promote cybersecurity governance for ITG’s Payment Services (IT PS).
• Support IT PS in understanding, controlling, and managing their cyber risks.
• Oversee end-to-end cyber risk supervision across the three cross entity sectors: IT Cash Management, Customer Data Services, Electronic Payments, and Factoring.
• Identify and analyze risks while collaborating to permanent control activities on ICT and non-ICT risks:
• Determine root causes and potential adverse events,
• Plan and conduct operational risk inputs (RCSA results, historical incidents, control plans) to update the risk landscape,
• Follow remediations by overseeing implementation of corrective actions and verifying effectiveness.
• Report to the CISO/ITRO/ICRO Payment.
• Issue alerts, propose corrective actions, and deliver a consolidated risk overview.
• Support risk-management exercises.
• Provide inputs for RCSA, audits and other relevant reviews,
• Support 3rd party management analysis.

Requirements :

• Knowledge of GRC IT / Service Now tool and the Microsoft Office suite,
• Proven knowledge of risk management (+3-year experience),
• Strong analytical skills – ability to perform root cause analysis and impact assessment.
• Excellent interpersonal skills.
• English (Expert): Spoken & written; interview in English.

If you’re interested in this job please send your CV to , with the reference “CA/ITRisk&PermanentController”.

Thank you! :)

Decskill is committed to equality and non-discrimination with all our talents. We recruit and promote talent, based on diversity and inclusion, regardless of age, gender, ethnicity, race, nationality or any other form of discrimination incompatible with the dignity of the human being.