Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2 days ago

Senior Cyber Risk and Assurance Specialist

techhub10 open roles

Where
Porto
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Cyber Risk and Assurance Specialisttechhub · Porto

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on techhub's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.9% of postings close within 7 days. Measured by our own scanner across the market. techhub postings stay open a median of 1 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 12.9%7 days
  4. 21.0%14 days
  5. 35.6%30 days
  6. 58.5%60 days
This job: posted 2 days ago

techhub median: 1 days open

The posting

Build. Test. Deliver. Enjoy at Pepco!

About the role

At Pepco, we’re growing fast and building our Tech Hub in Porto to support our business across Europe.

We are looking for a Senior Cyber Risk & Assurance Specialist to join our team. In this role, you will help strengthen our cybersecurity governance, risk management, compliance, and assurance practices, ensuring that security risks are effectively identified, assessed, and managed across the organisation. Working closely with business and technology teams, you will lead cyber risk and assurance activities, support regulatory compliance, and drive continuous improvement in our security processes.

If you like things simple, practical and with real ownership, you’ll fit right in.

What you’ll be doing

  • Conduct complex cyber risk assessments across business and technology areas, identifying vulnerabilities, evaluating risks, and recommending mitigation strategies.
  • Facilitate risk assessments and workshops, providing expert guidance on risk treatment and acceptance decisions.
  • Develop risk reports, dashboards, and insights to support informed business decisions.
  • Support the development and continuous improvement of information security policies, standards, and governance frameworks.
  • Manage compliance activities related to ISO 27001, NIS2, PCI-DSS, GDPR, and other applicable requirements.
  • Coordinate internal and external audits, assess security controls, and monitor remediation activities.
  • Conduct third-party security assessments, evaluating supplier risks, security controls, and compliance documentation.
  • Participate in security assurance testing, control validation, and cyber resilience exercises.
  • Support security awareness initiatives, including training programmes and phishing simulations.
  • Collaborate with Security Architecture, Security Operations, Internal Audit, Procurement, Legal, Privacy, and other business teams.
  • Act as a senior subject matter expert, sharing knowledge with colleagues, taking ownership of specific risk and assurance areas, and supporting the Cyber Risk & Assurance Lead when needed.

What we’re looking for

  • Bachelor’s or Master’s degree in Cybersecurity, Information Security, IT, Risk Management, Business Administration, or a related field. Certifications such as CRISC, CISA, CISM, ISO 27001 Lead Auditor/Implementer, or PCI Professional (PCIP) are a plus.
  • At least 7 years of experience in cybersecurity, risk management, governance, compliance, audit, or assurance.
  • Proven experience conducting cyber risk assessments, evaluating security controls, and supporting compliance activities. Experience in third-party risk management or vendor security assessments is an advantage.
  • Strong knowledge of cybersecurity governance and risk management frameworks, including ISO 27005, NIST RMF, and enterprise risk management principles.
  • Good understanding of information security frameworks and standards, such as ISO 27001, NIST CSF, and CIS Controls.
  • Knowledge of regulatory requirements, including NIS2, GDPR, and PCI-DSS, and their practical application.
  • Experience supporting internal and external audits, regulatory assessments, or certification processes.
  • Ability to analyse technical and organisational risks and translate findings into practical business recommendations.
  • Experience with reporting, dashboards, and data analysis tools.
  • Strong analytical thinking, attention to detail, and the ability to manage multiple priorities independently.
  • Excellent communication and stakeholder management skills, with the ability to work effectively with both technical and non-technical teams. Previous experience in multinational, complex, or regulated environments is a plus.
  • Fluent English, both written and spoken. Additional languages are an advantage.

What we offer

  • Hybrid model: 2 days remote / 3 days onsite
  • Office based in Porto: 📍 https://maps.app.goo.gl/Nn7hc6uYrmPiT8Fc9
  • Competitive salary and annual bonus
  • Health insurance from the month after joining
  • Meal allowance
  • Employee discount in Pepco stores in Portugal
  • Learning and development opportunities
  • International exposure and collaboration across markets
  • A simple, down-to-earth culture where people support each other

About Pepco

Pepco is one of Europe’s fastest-growing retail companies, with thousands of stores and millions of customers visiting us every month. Behind that growth, there’s a team of people who make things happen. We keep things simple, we focus on results, and we support each other to get there. At Pepco, no two days are the same. And that’s exactly how we like it.

Interested? Apply now and be part of building something new in Porto!

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against techhub's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on techhub's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    techhub's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.