GRADUATE NON-FINANCIAL RISKS - IT RISK MANAGEMENT

About the Role

• The Non-Financial Risks & Risk Governance team is looking for a graduate in Lisboa to join the group, with a particular focus on technology-related risks.
• This role offers the opportunity to build a career at the intersection of technology, business controls, cybersecurity, risk management and regulatory compliance.
• You will work with internal standards and policies with Internal Security and business stakeholders to help align systems.
• You will report to the Head of Non-Financial Risks & Risk Governance, you will work in Lisbon, Luxembourg and across multiple locations.
• You will join a supportive team of risk professionals and will have the opportunity to gain insight into how technology risks can affect business operations.
• You should be comfortable working with documentation, spreadsheets and reporting tools and have the ability to understand and assess risks, particularly those related to IT, Information Security and cyber risk, while supporting operational resilience, fraud and anti-money laundering activities.
• You will develop your skills within the organization's governance framework, understanding areas of risk management and governance and contributing to risk awareness initiatives across the business.

What You'll Do

• Assists with operational risk assessments, scenario analysis and other risk-related activities, particularly in the areas of IT, Information Security and cyber risk, while supporting operational resilience, fraud and anti-money laundering activities.
• Support the identification, assessment and ongoing monitoring of technologies and processes within the IT, Information Security and cyber risk management framework, across the group.
• Investigate operational risk events and newly identified areas for remediation and track mitigation measures and compliance with action plans through to completion.
• Support the delivery of information security and business stakeholders to align systems, information security and GDPR policies.
• Assist in the preparation and updating of presentations, policies, internal standards and key performance indicators.
• Support the delivery of risk management via the Non-Financial Risks & Risk Governance team.
• Assist in coordinating operational risk reporting to the Board and submit reports and regulatory submissions to relevant regulatory and supervisory enforcement authorities.
• Responsible for the formulation, maintenance and updating of key risk indicators for cyber risks.
• Contribute to process improvement initiatives, risk assessment methodologies and other activities to support Non-Financial Risks team, IT and Information Security and business stakeholders to align systems, information security and GDPR policies.

What You'll Need

• Master's degree in Information Security, IT, Cybersecurity, Business, Engineering or a related field.
• Excellent communication skills, with the ability to speak complex information security and cybersecurity concepts in a clear and simple manner.
• Ability to think critically, challenge constructively and is responsible for identifying mitigations and risk topics are advantageous.
• A collaborative mindset and a collaborative environment is important.
• Good working knowledge of MS Excel, MS Word and MS PowerPoint and data analysis and reporting tools.
• Full professional proficiency in English. Fluency in Portuguese is desirable.

Nice to Have

• Previous internship experience in non-financial risk, operations or financial subjects will be considered a plus.

Why You'll Love Working Here

• An intensive one-week off-site training programmes focused on building foundational skills for early-career development.
• Opportunities to gain insight across departments and understand the value chain related to the investment solutions, processes and technology.
• A hybrid model combining home and office-based work.
• Modern offices in an exceptional Lisbon location.