IT Risk Specialist & Middle Office - French Speaker

IT Risk Specialist & Middle Office - French Speaker Every moment counts. Especially those you live to the fullest. Welcome to Consort Group. For over 30 years, Consort Group has been helping companies leverage their data and infrastructure. It is backed by two leaders, Consortis and Consortia, and places people and social responsibility at the heart of its values. This is your future team Established in 2021, Consort Portugal supports the strategic offshoring choices of our clients, particularly in Europe, and brings our expertise in infrastructure services to the Portuguese market. With a team of around 45 employees, our Service Center based in Porto is developing a dynamic nearshore business, offering the French and European markets an environment of excellence and high potential. IT Risk Specialist This is your mission Are you passionate about IT Risk Management, Third-Party Risk Management (TPRM), Cloud Governance, and Regulatory Compliance ? Then this position is for you. As an IT Risk Specialist , you will be responsible for supporting the deployment of Third-Party IT Risk Management processes, Cloud risk governance, and DORA compliance initiatives within an international financial services environment. Build side: Coordinate Cloud solution assessment activities and related deliverables. Support the deployment and continuous improvement of Third-Party IT Risk Management (TPTRM) processes. Contribute to DORA compliance initiatives for supplier and intra-group sourcing contracts. Assist Procurement teams in supplier due diligence activities and contract remediation processes. Maintain and improve data quality within BNP Paribas Group governance and risk management tools. Support the implementation of IT Risk governance frameworks, controls, and reporting processes. Organize and facilitate steering committees related to third-party and intra-group risk management. Run side: Monitor and report the progress of Cloud documentation and compliance activities. Maintain and update IT Risk indicators, controls, and governance dashboards. Follow up on Key Risk Indicators (KRIs), obsolescence, Shadow IT, Light IT, and permanent control activities. Support the monitoring of IT Risk Quality, historical incidents, and remediation plans. Manage administrative activities related to IT Risk governance and reporting. Ensure the ongoing follow-up of third-party supplier risks and Cloud-related risks. Maintain compliance with internal procedures, methodologies, and regulatory requirements. This is your background You have at least 2 years of experience in IT Risk Management, Cybersecurity Governance, Third-Party Risk Management, or a related IT governance function. You are comfortable working in regulated environments, coordinating multiple stakeholders, and ensuring high-quality governance and compliance deliverables. You are organized, detail-oriented, and capable of driving activities autonomously while respecting deadlines and procedures. This is your career path This role offers exposure to: IT Risk Management and Governance Third-Party Risk Management (TPRM) Cloud Risk Management DORA Compliance Regulatory and Security Frameworks Supplier Risk Assessment IT Control and Risk Reporting This is your expertise: IT Risk Management Third-Party Risk Management (TPRM) Cloud Risk Governance DORA Regulation ServiceNow GRC (IT Module) Supplier Due Diligence (SDD) IT Controls and Key Risk Indicators (KRIs) Risk Reporting and Governance Microsoft Excel and MS Office Suite ISO 27001 knowledge (highly desirable) Languages French: Fluent (Mandatory) English: Professional proficiency This is how you work as part of a team: Excellent organizational skills Strong written and verbal communication skills Ability to facilitate meetings and coordinate stakeholders Analytical and detail-oriented mindset Result-driven approach Good listening and questioning skills Ability to work effectively in a multicultural environment Autonomous and proactive attitude This is our commitment At Consort Group, you are an expert who we support so that every assignment becomes a step that counts. Attentive and human onboarding A truly hands-on management style Continuous training opportunities Concrete commitments: inclusion, equality, solidarity A comprehensive HR package: health insurance, TR card, CSE, pension plan A culture of feedback and meaningful projects It's clear The recruitment process: An initial phone call with our recruitment team An HR interview and a job interview with a business engineer A test or technical interview with one of our experts A final meeting with your future manager or project manager And if we're a good fit, we'll get started together. Good to know Location: Porto, Portugal Contract: Permanent contract/ B2B Remote work: Hybrid Salary: 38k to 52k yearly Job category: IT Risk / Cybersecurity Governance / Third-Party Risk Management What you will do here, you won't do anywhere else. This moment is yours. Department Consortis - Infra & Support Role Responsable Gouvernance, Risques et Conformité (GRC) Locations Porto Remote status Hybrid Yearly salary €38,000 - €52,000 Employment type Full-time Famille de Métiers Sécurité/CyberSécurité