GRADUATE NON-FINANCIAL RISKS - IT RISK MANAGEMENT

About the Role

• The Non-Financial Risks & Risk Governance team is looking for a recent graduate in Lisbon to join the group, with a particular focus on technology-related risks.
• This role offers the opportunity to build a career at the intersection of technology, business controls, cybersecurity, risk management, and regulatory compliance.
• You will work with Internal Security and business stakeholders to ensure that systems are aligned with internal standards and policies.
• You will report to the Head of Non-Financial Risks & Risk Governance, and you will work in Lisbon, Luxembourg, and at multiple locations.
• You will join a supportive team of risk professionals and will have the opportunity to gain insight into how technology risks can affect business operations.
• You should be comfortable working with documentation, spreadsheets, and reporting tools, and have the ability to understand and assess risks—particularly those related to IT, information security, and cyber risk—while supporting operational resilience, fraud prevention, and anti-money laundering activities.
• You will develop your skills within the organization's governance framework, gain an understanding of risk management and governance, and contribute to risk awareness initiatives across the business.

What You'll Do

• Assists with operational risk assessments, scenario analysis, and other risk-related activities, particularly in the areas of IT, information security, and cyber risk, while supporting operational resilience, fraud prevention, and anti-money laundering efforts.
• Support the identification, assessment, and ongoing monitoring of technologies and processes within the IT, information security, and cyber risk management framework across the group.
• Investigate operational risk events and newly identified areas requiring remediation, and track mitigation measures and compliance with action plans through to completion.
• Support the provision of information to security and business stakeholders to ensure that systems, information security, and GDPR policies are aligned.
• Assist in the preparation and updating of presentations, policies, internal standards, and key performance indicators.
• Support the implementation of risk management through the Non-Financial Risks & Risk Governance team.
• Assist in coordinating operational risk reporting to the Board and submit reports and regulatory filings to the relevant regulatory and supervisory enforcement authorities.
• Responsible for developing, maintaining, and updating key risk indicators for cyber risks.
• Contribute to process improvement initiatives, risk assessment methodologies, and other activities to support the Non-Financial Risks team, IT and Information Security, and business stakeholders in aligning systems, information security, and GDPR policies.

What You'll Need

• Master's degree in Information Security, IT, Cybersecurity, Business, Engineering, or a related field.
• Excellent communication skills, with the ability to explain complex information security and cybersecurity concepts in a clear and simple manner.
• The ability to think critically, offer constructive feedback, and identify mitigation strategies and risk issues is advantageous.
• A collaborative mindset and a collaborative environment are important.
• Good working knowledge of MS Excel, MS Word, and MS PowerPoint, as well as data analysis and reporting tools.
• Full professional proficiency in English. Fluency in Portuguese is preferred.

Nice to Have

• Previous internship experience in non-financial risk, operations, or finance-related fields will be considered a plus.

Why You'll Love Working Here

• An intensive one-week off-site training program focused on building foundational skills for early-career development.
• Opportunities to gain insight across departments and understand the value chain related to investment solutions, processes, and technology.
• A hybrid model that combines work from home and work in the office.
• Modern offices in a prime Lisbon location.