IT and Cybersecurity Risk Manager

IT and Cybersecurity Risk Manager – Euronext

Join Euronext as an IT and Cybersecurity Risk Manager. The position will be based in Porto and reports to the Head of Group resilience, Operational and Technology risk.

Responsibilities

• Support the strengthening of the Group’s ICT risk management framework and Digital Operational Resilience Strategy across all Euronext entities.
• Contribute to the development of local ICT and operational risk profiles and support transversal, Group-level risk analyses.
• Review and challenge Third Party Provider Risk Assessments performed by Procurement, Compliance, InfoSec and Data Privacy teams.
• Oversee the Third Party Provider process, including exit strategy review and test, onsite audit, Register Of Information maintenance, identifying contractual or regulatory gaps and ongoing monitoring of Service Level Agreements.
• Contribute to the review and ongoing maintenance of the Third Party Provider Risk Management Framework.
• Collaborate with internal stakeholders to identify, assess and monitor ICT risks (cybersecurity, data, IT, third-party providers and Business Continuity), ensuring alignment with company policies and regulatory frameworks (e.g. DORA, ISO 27001).
• Assist in conducting ICT asset risk assessments, including evaluation of criticality, exposure and dependency risks.
• Support the creation and maintenance of ICT risk registers and dashboards, ensuring accurate documentation and reporting.
• Contribute to the development and enhancement of ICT risk mitigation strategies and action plans.
• Participate in change management and project management risk oversight.
• Support the review and enhancement of ICT risk management processes, methodologies, templates and tools, including internal procedures.
• Contribute to the preparation of internal reports, dashboards and presentations for management and governance forums.
• Assist with the tracking of action plans and improvement initiatives and support sharing of best practices across the risk management community.
• Support the development of ICT risk awareness programmes and training initiatives.
• Support the preparation of regular monitoring and analysis of the external risk environment, including emerging ICT and operational risks.
• Contribute to the identification of risk scenarios and potential impacts related to cyber threats, AI evolution, geopolitical developments and other emerging risk drivers.
• Coordinate inputs with the Cyber Threat Intelligence team and consolidate insights from internal and external working groups.

Your Profile

• Minimum three years of higher education in IT, cybersecurity or risk management, or equivalent experience.
• Entry‑level knowledge of IT systems, cybersecurity concepts and risk management frameworks.
• Familiarity with standards and best practices such as ISO 27001, NIST and CIS.
• Understanding of financial regulation (e.g. MiFID, DORA, NIS2) is a plus.
• Fluent in English (daily use).
• Strong analytical and problem‑solving skills.
• Autonomy, proactivity and ability to summarise complex information.
• Excellent communication skills, both written and verbal.
• Interest in digital risk.

The Risk & Compliance department, a team of almost 60 professionals, ensures the value and reputation of the company. Identifying and assessing risks, implementing mitigation actions, ensuring a sound system of controls, maintaining awareness and a robust risk and compliance culture across the organisation, monitoring and ensuring compliance with the applicable regulations are the core activities embedded in our team.

We are proud to be an equal opportunity employer. We do not discriminate against individuals on the basis of race, gender, age, citizenship, religion, sexual orientation, gender identity or expression, disability, or any other legally protected factor. We value the unique talents of all our people, who come from diverse backgrounds with different personal experiences and points of view and we are committed to providing an environment of mutual respect.