Cybersecurity Lead

Job not on LinkedIn

🔥 2 hours ago

🇵🇹 Portugal – Remote

💵 €65k - €95k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Coverflex

WebsiteLinkedInAll Job Openings

51 - 200 employees

🛡️ Insurance

🏥 Healthcare

💼 Consulting

💰 Series A on 2023-02

Insurance • Healthcare • Consulting

Coverflex is a company that offers a fully remote work environment with a strong emphasis on building a unique and diverse team culture. They provide a range of employee benefits including health insurance, competitive compensation with stock options, and significant budgets for personal and professional development. Coverflex also focuses on transparency, integrity, and maintaining a positive work-life balance, offering generous time off policies and remote work budgets. They are recognized as a top employer and are committed to equal opportunity employment.

📋 Description

• Identify material security risks early and strengthen security operations and third-party assurance • Protect customer and company data and support reliable payment and benefits services • Preserve ISO 27001 and contractual commitments • Ensure material security risks have owners, treatment decisions, due dates, and monthly reviews • Establish monthly dashboards and quarterly Management Team risk reviews • Own and maintain the core ISMS and cybersecurity documentation • Publish a risk-ranked 12-month roadmap and management dashboard • Coordinate privacy- and GDPR-specific documentation with the DPO and Legal/Compliance • Clarify escalation roles, risk thresholds, control ownership, evidence requirements, vulnerability SLAs, and risk-exception workflows • Run executive risk exercises and technical control validations • Establish review gates for high-risk launches, architecture changes, and critical vendors • Introduce repeatable threat-modelling patterns • Tier critical third parties and track material gaps to closure • Maintain the security roadmap, backlog, operating metrics, tooling, targeted specialist support, and core ISMS and cybersecurity policies and plans • Partner with Technology Leadership, Engineering, Infrastructure/Platform, Product, IT, Legal/Compliance, the DPO, Finance, Procurement, People, customer-facing teams, auditors, penetration testers, providers, vendors, and regulated/payment partners • Report to the CTO as a senior individual contributor and own the cybersecurity function

🎯 Requirements

• Senior, hands-on security experience in a regulated fintech, payments, SaaS, or similarly high-trust environment • Personally conducted security investigations, tuned detections, assessed cloud and identity controls, reviewed architectures, and validated vulnerability remediation • Strong cloud, application/product security, IAM, detection/response, vulnerability management, and third-party risk judgement • Experience owning ISO 27001 or comparable assurance while keeping the programme outcome-focused • Ability to build a proportionate security programme in a scaling company • Credibility with engineers and ability to translate technical detail into clear business recommendations • Fluent professional English • Portuguese, Spanish, or Italian is a plus • Experience with payment processors, card ecosystems, regulated partners, or multi-market fintech operations is a plus • Experience using managed security services and specialist providers effectively is a plus • Security automation and evidence-collection experience is a plus • Experience with executive risk exercises and supplier resilience scenarios is a plus • Relevant certifications such as CISSP, CISM, CCSP, OSCP, or ISO 27001 Lead Implementer/Auditor are a plus • Knowledge of AWS and/or GCP security tooling, SIEM, detection/response, EDR/MDM, identity/SSO/MFA, privileged-access tooling, vulnerability scanning, application security testing, penetration-testing workflows, Jira/Notion or equivalent, and scripting/automation

🏖️ Benefits

• Stock Options under our Equity Incentive Plan • All Coverflex benefits apply • Fully remote setup, with on-site get-togethers at least once a year • Competitive and flexible compensation • Coverflex card • MacBook • €500 onboarding budget • €1,000 yearly FlexBudget for professional development and remote work enablement • Health Insurance plans, with the option to add family members and update conditions (depending on country) • 25 day paid vacation days • 3 caring days per year to work on side projects that support causes with a positive impact on our society • 2 additional paid weeks on top of the legal maximum Parental Leave • Your birthday + kids’ birthday off