Lead Analyst, Security Strategy – Assurance

🕒 March 21

🇵🇹 Portugal – Remote

⏰ Full Time

🟠 Senior

🔐 Security Analyst

👻 Ghost score 55%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

OutSystems

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2001

💼 Consulting

🏥 Healthcare

📣 Marketing

Consulting • Healthcare • Marketing

OutSystems is a software company that provides a low-code application development platform. It allows organizations to develop, deploy, and manage enterprise-grade applications with minimal coding effort. By simplifying the process of application development, OutSystems helps businesses accelerate their digital transformation and improve productivity.

📋 Description

• Define the Third-Party Risk Management strategy, including risk tiering, assessment frameworks, and monitoring cadences for critical vendors • Partner with Digital, Procurement, Legal, and Engineering teams to integrate risk requirements into vendor selection and contracting • Evolve the division’s risk register • Facilitate workshops with business leaders to identify emerging risks and validate controls • Act as the primary point of contact for internal and external audits • Support certifications such as ISO 27001, SOC 2, and regional frameworks • Improve evidence collection, risk tracking, and GRC tooling • Build scalable operating procedures and reduce manual effort • Assess emerging regulatory requirements and translate them into programme changes • Define scope for cross-functional initiatives and mentor colleagues

🎯 Requirements

• Bachelor’s degree in Information Security or a related field • 7–10 years of experience in risk management or compliance • 3–4 years focused on Third-Party Risk Management (TPRM) • Strong working knowledge of enterprise risk and security frameworks, including ISO 27001, ISO 31000, SOC 2, and NIST • Familiarity with emerging European regulations, particularly DORA, NIS2, and GDPR • Knowledge of HIPAA or PCI DSS is advantageous • Proven ability to operate autonomously • Experience managing complex cross-functional alignment • Experience mentoring junior team members • Professional certifications such as CRISC, CISM, CISSP, CISA, or ISO 27001 Lead Auditor/Implementer are highly preferred

🏖️ Benefits

• Structured professional development programs • Professional Development Fund • Internal Mobility Program • Mentorship from industry experts • Inclusive culture • Equal opportunity employment