We are building a resilient, “security by design” environment for its global banking platforms. You will work directly with the CISO office and senior business leaders to protect critical financial services, shape security strategy, and drive innovative, AI enabled controls across cloud native solutions.

What will you do?

• Identify, assess, and prioritize cyber risk across the IT project portfolio and production environments, ensuring alignment with our security policies, ISO 27001/27005, ISO 31000 and other relevant standards.
• Design end to end security architectures (network, application, data & cloud) that embed security controls from the outset. Produce security blueprints, reference architectures, and hardened configuration baselines.
• Act as the primary security advisor to IT delivery teams, product owners, and business units. Translate technical security requirements into clear, actionable guidance for non-technical stakeholders.
• Review security deliverables (risk assessments, threat models, test results, architecture diagrams) submitted by security analysts and engineering teams. Conduct independent security assessments and provide remediation road maps.
• Lead deep dive analyses of complex, cloud centric security scenarios (multi cloud, IaC, containers, serverless). Define cloud specific controls, tooling (CSP native, CSPM/CSA, secret management) and integration patterns.
• Identify gaps in existing security processes and champion continuous improvement initiatives. Leverage AI/ML tools (automated threat intel enrichment, anomaly detection, code review assistants) to increase efficiency and accuracy of security reviews.
• Conduct security workshops, trainings and “security champion” programs across the organization. Contribute to the internal security knowledge base and best practice documentation.

What are we looking for?

• CISSP certification – mandatory. Additional certifications such as CISA, CCSP, AWS/Azure/GCP Security Specialty are a plus.
• Bachelor’s (or higher) degree in Computer Science, Information Security, Engineering, or a related discipline.
• Minimum 8 years of progressive experience in cyber security, with at least 4 years in a security architecture or senior advisory role. Proven track record delivering security for large scale, cloud native banking or financial services projects.
• Deep knowledge of ISO/IEC 27000 series, ISO 27005, ISO 31000 and familiarity with NIST CSF or equivalent frameworks.
• Strong understanding of application, data, and infrastructure architecture (micro services, APIs, container orchestration, zero trust networks).
• Hands on experience securing AWS, Azure and/or GCP environments (IAM, networking, encryption, secure CI/CD pipelines).
• Familiarity with vulnerability management, SIEM, DLP, CSPM/CSA, SAST/DAST and IAM governance tools.
• Understanding of investment banking services, regulatory expectations (PSD2, GDPR, PCI DSS) and the typical threat landscape.
• Experience evaluating or integrating AI based security solutions (threat intel bots, automated risk scoring, code analysis assistants).
• English ➔ Mastery
• French ➔ Notions
• Local and Global teamwork (multiple geographical locations: Portugal/France/India)
• Good interpersonal skills and communication oral/written
• Ability to deliver/Results Driven
• Client focus
• Integrity

What can you expect from us?

• A permanent job contract for a long term project;
• Tech equipment + SIM Card + personal smartphone;
• Health and Life Insurance;
• Social events and team buildings;
• The commitment of letting you grow with us, and be rewarded accordingly;
• A dynamic and young team that will be always there to support you;
• Training in the latest technologies;
• Coffee, fruits, snacks and a warm welcoming when you pass by the office.