Senior Security Engineer and Grc Specialist (M/F)
emagine - Portugal
13.06.2025 | | Referência: 2284708

PARTILHAR
Empresa:
emagine - Portugal
Descrição da Função
At emagine Portugal, we believe in the power of talent to drive innovation. As a global consulting company, we connect top professionals with some of the most exciting and technologically advanced projects across Europe. With a strong presence in Portugal, we are committed to delivering value through expertise, collaboration, and agility.
What You'll Be Doing:
Security Engineering
- Apply secure configuration baselines and hardening across OS, databases, and cloud platforms
- Automate security processes to boost efficiency and reduce manual effort
- Support security and vulnerability assessments and patch implementation
- Contribute to threat hunting, root cause analysis, and incident response
Risk, Compliance & Governance
- Identify and assess IT security risks; design and monitor mitigation strategies
- Define and enforce security policies, standards, and procedures
- Ensure compliance with key regulations and frameworks: NIS2, GDPR, ISO 27001, NIST, IEC 62443, Chinese cybersecurity regulations
- Perform third-party risk assessments
- Support implementation of business continuity and incident response plans
Collaboration & Communication
- Act as a trusted advisor to internal teams on security best practices
- Translate complex security concepts into actionable guidance for both technical and non-technical audiences
What We're Looking For:
- Bachelor's degree in Information Security, Computer Science, or related field
- 8-12 years of experience in cybersecurity, with both GRC and hands-on engineering background
- Strong understanding of NIS2, GDPR, ISO 27001, NIST, and Chinese data/cybersecurity regulations
- Working knowledge of Azure, AWS, or OCI cloud security services
- Experience with tools like SIEM, EDR, vulnerability scanners, and cloud-native security controls
- Solid grasp of IAM concepts (SSO, MFA, PAM, access reviews)
- Familiarity with GRC tools, risk assessments, and data protection best practices
- Certifications such as CISSP, CRISC, CISA, or ISO/IEC 27001 Lead Auditor are a strong plus
What Sets You Apart:
- Strong technical depth and hands-on engineering mindset
- Strategic thinking with a pragmatic, solutions-oriented approach
- Clear and persuasive communication across stakeholders
- Adaptability to evolving threats, technologies, and regulations
Interested?
Send your application to

Observações
Not Specified (Portugal)