Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2 days ago

Information Security & Compliance Consultant

Roboyo31 open roles

Where
Porto
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowInformation Security & Compliance ConsultantRoboyo · Porto

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Roboyo's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market. Roboyo postings stay open a median of 19 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted 2 days ago

Roboyo median: 19 days open

The posting

Roboyo AI is a category shaper in Applied AI and Agentic Automation. We help leading enterprises move from automation projects and AI experiments into governed, production-grade systems that execute real work across workflows, processes, products and services.

Our heritage is in scaled enterprise automation; our future is Applied AI and Agentic Automation: autonomous agents, AI engineering squads, process orchestration, data and knowledge foundations, and human-in-the-loop governance embedded deeply into how our clients operate.

We are not here to sell AI theatre. We are here to turn AI into working systems, measurable outcomes and repeatable transformation programs.

About the role

We are looking for an Information Security & Compliance Consultant to manage and deliver client projects in the areas of information security, cybersecurity, data protection and regulatory compliance.

The successful candidate will take ownership of a portfolio of clients and projects, supporting organisations in the implementation, maintenance and continuous improvement of ISO/IEC 27001 Information Security Management Systems (ISMS) and in their compliance with regulatory frameworks including NIS2, DORA and GDPR.

The role combines strong technical and regulatory knowledge with hands-on consulting, audit preparation, risk management and client relationship management. The consultant will also contribute to the maintenance and continuous improvement of Roboyo's internal management systems.

Main responsibilities:

  • Lead the implementation, maintenance and continuous improvement of ISO/IEC 27001 Information Security Management Systems (ISMS) for clients.
  • Perform ISO 27001 gap assessments, readiness assessments and support organisations throughout certification and surveillance audit processes
  • Support organisations in assessing and implementing requirements arising from NIS2, including governance, cybersecurity risk management measures, incident management, business continuity, supply-chain security and compliance monitoring.
  • Support financial-sector clients and ICT service providers with DORA compliance, including ICT risk management, incident management, operational resilience and ICT third-party risk.
  • Provide GDPR/data protection advisory services, including privacy governance, risk assessments, policies, procedures and, where applicable, DPO services.
  • Conduct and coordinate information security risk assessments, supporting the definition and monitoring of risk treatment plans.
  • Develop, review and maintain information security and compliance documentation, including policies, procedures, risk registers, Statements of Applicability and supporting evidence.
  • Coordinate and/or perform internal ISO 27001 audits and support external certification audits.
  • Coordinate activities with certification bodies, auditors, customers and specialised cybersecurity providers.
  • Support customers in establishing and improving third-party/supplier security and due diligence processes.
  • Support incident management, business continuity and information security governance activities.
  • Identify compliance gaps and define pragmatic remediation plans with customers.
  • Manage multiple customer engagements, including project planning, deliverables, service hours and agreed milestones.
  • Participate in customer meetings, workshops, presentations and demonstrations of consulting services and compliance solutions.
  • Contribute to commercial activities, including demos, explore meetings, scope definition, effort estimation and preparation of proposals for information security and compliance project

Mandatory requirements:

  • Higher education in Information Security, Cybersecurity, Information Systems, Engineering, Management, Law or a related field.
  • Proven hands-on experience implementing and/or maintaining ISO/IEC 27001 ISMS.
  • Practical knowledge of ISO/IEC 27001:2022 requirements and information security risk management.
  • Demonstrable knowledge and project experience related to NIS2 requirements and cybersecurity governance.
  • Strong knowledge of GDPR and data protection principles.
  • Knowledge of DORA and ICT risk/compliance requirements.
  • Experience preparing organisations for internal, certification and/or surveillance audits.
  • Ability to develop information security policies, procedures, risk assessments and compliance documentation.
  • Strong customer-facing and stakeholder-management skills.
  • Ability to manage multiple customers and projects independently.
  • Good written and verbal communication skills in Portuguese and English.

Certifications:

At least one of the following certifications, or equivalent recognised certification:

  • ISO/IEC 27001 Lead Implementer
  • ISO/IEC 27001 Lead Auditor

Candidates holding both Lead Implementer and Lead Auditor certifications will be strongly preferred.

Valued requirements:

  • Both ISO/IEC 27001 Lead Implementer and Lead Auditor certifications.
  • DPO / Data Protection certification.
  • Additional information security or risk certifications.
  • Experience with ISO/IEC 27701 Privacy Information Management Systems.
  • Experience with other management system standards, particularly ISO 9001, ISO 22301, ISO 37001 or ISO 13485.
  • Experience with third-party risk management, supplier assessments and due diligence.
  • Experience with business continuity, incident response and operational resilience.
  • Experience coordinating penetration testing, vulnerability assessments or other cybersecurity assurance activities with specialist providers.
  • Previous consulting experience and responsibility for managing a portfolio of customers.
  • Experience preparing commercial proposals and estimating information security/compliance projects.

Behavioural profile:

  • Autonomous and accountable, able to take ownership of client engagements from assessment through implementation and audit.
  • Strong organisational skills and ability to manage multiple clients, priorities and deadlines simultaneously.
  • Analytical mindset with strong attention to detail.
  • Ability to translate complex regulatory and technical requirements into practical actions for customers.
  • Proactive approach to identifying risks, compliance gaps and improvement opportunities.
  • Strong written and verbal communication skills, particularly in customer-facing environments.
  • Comfortable facilitating workshops and interacting with management, technical teams, auditors and external partners.
  • Pragmatic and solution-oriented approach to compliance.
  • Strong team spirit and willingness to collaborate with internal and external specialists.

What We Offer:

  • Health Insurance: Comprehensive Multicare III health insurance, providing you with additional healthcare coverage and peace of mind.
  • Food Allowance: Receive a €7 daily food allowance to support your everyday meal expenses.
  • Flexible Hybrid Working: Enjoy a flexible approach to work, with the opportunity to work from our modern office 1–2 days per week on a non-mandatory basis. While remote working is possible, we encourage spending more time with the team during your initial onboarding period to build connections and get settled.
  • A modern and welcoming office environment, conveniently located and equipped with excellent facilities for collaboration and teamwork.
  • A truly international environment, working with talented colleagues and clients on global automation and AI projects.
  • Work at the forefront of Agentic AI and automation, innovating with emerging technologies and helping shape next-generation, future-ready intelligent automation solutions.
  • A growth-focused environment where you are empowered to develop, excel, take ownership, and make a meaningful contribution.
  • Real impact from day one, with the opportunity to bring forward ideas, take initiative, and influence how we work and what we build.
  • A culture shaped by strong values, with human-centric leadership, ownership, integrity, collaboration, and continuous growth at the heart of how we work and succeed together.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Privacy Notice: By applying, you consent to the processing of your personal data for recruitment purposes in line with our Privacy Policy: https://roboyo.global/data-privacy/

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Roboyo's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Roboyo's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Roboyo's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.