ICT Compliance Specialist
- Hiring from
- Portugal
- Work type
- Hybrid
- Posted
Is this job info correct?
551,268 remote jobs, straight from company career pages
100% free · New jobs every hour
Show job descriptionHide job description
The ICT Compliance Specialist plays a key role in ensuring that the Group's ICT operations, services and third-party arrangements remain aligned with regulatory, contractual and internal governance requirements.
Working closely with ICT, Risk, Compliance, business stakeholders and external providers, the Specialist will support the ongoing management of ICT compliance activities across the Group. This includes regulatory compliance, third-party risk management, client due diligence, audit support, ICT reporting and continuous improvement initiatives.
Working closely with ICT, Risk, Compliance, business stakeholders and external providers, the Specialist will support the ongoing management of ICT compliance activities across the Group. This includes regulatory compliance, third-party risk management, client due diligence, audit support, ICT reporting and continuous improvement initiatives.
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business Administration, Law or a related discipline.
- 3 to 5 years of experience in ICT compliance, information security governance, risk management, audit or related fields.
- Experience working within regulated industries, preferably financial services.
- Strong understanding of ICT compliance, governance and risk management principles.
- Familiarity with regulatory and industry frameworks such as:
- DORA;
- CSSF Circulars;
- EBA Guidelines;
- ISO 27001;
- NIST;
- ITIL.
- Experience supporting audits, due diligence processes or compliance assessments.
- Strong analytical and documentation skills.
- Desirable:
- ISO 27001 Lead Implementer or Lead Auditor;
- CISA;
- CRISC;
- CISSP;
- ITIL Foundation;
- DORA, ICT risk or regulatory compliance certifications.
- Ability to translate regulatory requirements into practical business and operational actions.
- Excellent communication and stakeholder management skills.
- Strong attention to detail and organizational capabilities.
- Fluent English is required. Portuguese and French are considered an advantage.
1. ICT Compliance & Governance
- Support the ongoing maintenance of the Group ICT compliance framework.
- Assist in ensuring alignment with applicable regulations, standards and internal policies.
- Monitor regulatory developments and recommend updates to controls, procedures and documentation.
- Maintain compliance evidence and documentation repositories.
- Assist in the preparation and review of ICT policies, standards and procedures.
- Contribute to governance reporting and management reviews.
- Prepare responses to client due diligence questionnaires (DDQs), security assessments and compliance requests.
- Compile compliance evidence and supporting documentation required by clients and regulatory stakeholders.
- Coordinate recurring compliance reporting activities.
- Assist with regulatory information requests and reporting obligations.
- Prepare dashboards, KPI and KRI reporting for management review.
- Ensure regulatory and contractual commitments are adequately documented and tracked.
- Support onboarding and ongoing assessment of ICT third-party providers.
- Maintain supplier compliance records, certifications and contractual documentation.
- Assist in maintaining the Register of Information and outsourcing inventories.
- Monitor supplier attestations, audit reports, certifications and compliance evidence.
- Support periodic third-party reviews and reassessments.
- Contribute to third-party risk reporting and remediation tracking.
- Support internal and external audits by coordinating the collection of evidence and documentation.
- Track audit findings, recommendations and remediation activities.
- Assist control owners in demonstrating compliance effectiveness.
- Support periodic control testing and compliance reviews.
- Contribute to continuous improvement initiatives resulting from audit outcomes.
- Support ICT risk assessments and control evaluations.
- Help identify compliance gaps and improvement opportunities.
- Track corrective actions and remediation plans.
- Assist in maintaining risk registers and compliance monitoring activities.
- Participate in incident reporting and post-incident review activities where required.
- Support compliance awareness and training initiatives.
- Promote a culture of governance, accountability and continuous improvement.
- Collaborate with ICT, Risk, Compliance, HR and business teams across the Group.
- Assist stakeholders in understanding and complying with ICT governance requirements.
- Highly organized and detail-oriented.
- Strong analytical mindset.
- Professional and proactive attitude.
- Ability to manage multiple priorities simultaneously.
- Comfortable working independently while collaborating with international teams.
- Continuous improvement and learning oriented.