About the Position

GRC Specialist

Location: Porto, Portugal

Company: Farfetch

Employment Type: Full-time

Work Location Type: Hybrid

About the Role

Farfetch is a leading global marketplace for the luxury fashion industry. Our office near Porto, in the north of Portugal, is a vibrant business hub where tech professionals connect and network.

We're looking for a Cyber Governance, Risk and Compliance Specialist to join our Information Security team. In this role, you'll help strengthen Farfetch's cybersecurity governance, risk management, and compliance practices, ensuring our security policies, controls, and processes align with business needs, regulatory requirements, and industry standards.

Responsibilities

Support the development, implementation, and continuous improvement of Farfetch's Information Security governance framework.
Recommend and implement changes to strengthen security controls and reduce the risk of unauthorized access.
Review, maintain, and audit Information Security policies, procedures, and related documentation.
Monitor compliance with applicable legal, regulatory, and industry standards and requirements.
Perform Information Security risk assessments and other security reviews, identifying gaps and supporting the definition of appropriate mitigation actions.
Support audits, compliance assessments, and gap analyses across the Information Security landscape.
Coordinate and monitor company-wide Information Security controls to help protect the integrity of Farfetch's assets.
Contribute to increasing Information Security awareness across the business.
Collaborate with internal stakeholders to ensure security risks, controls, policies, and compliance requirements are effectively managed.
Contribute to Information Security initiatives involving areas such as Data Privacy, AI Governance, and Data Governance.

Requirements

Degree in Computer Science, Information Security, or a related field.
Background in software development or systems administration.
More than 4 years of experience in a similar Information Security, GRC, Risk, or Compliance role.
Good understanding of network protocols, design, and operations.
Working knowledge of Information Security principles, techniques, and technologies.
Experience with Information Security governance frameworks and standards, such as COBIT and ISO 27001.
Experience reviewing security policies and procedures, managing documentation, and performing gap analyses.
Good understanding of risk assessment methodologies, such as OCTAVE and NIST SP 800-30.
Certifications in Information Security, such as CRISC, CISA, CEH, or similar, are a plus.
Experience with Data Privacy Impact Assessments (DPIAs) is a plus.
Experience working on AI and Data Governance projects is a plus.
Strong English communication skills, both written and verbal.
Self-motivated, proactive, and comfortable working with minimal supervision.

We Offer

Health insurance for the whole family
Flexible working environment and well-being support and tools
Extra days off, sabbatical program, and days for community service
Training opportunities and free access to Udemy
Flexible benefits program

Equal Opportunities Statement

Farfetch is an equal opportunities employer ensuring that all applicants are treated equally and fairly throughout our recruitment process. We are determined that no applicant experiences discrimination on the basis of sex, race, ethnicity, religion or belief, disability, age, gender identity, ancestry, sexual orientation, veteran status, marriage and civil partnership, pregnancy and maternity, or any other basis prohibited by applicable law.

Scam Disclaimer

Please be aware that there may be fraudulent activities involving individuals or organizations falsely claiming to represent Farfetch in order to attract candidates to a SCAM. Farfetch does not conduct recruitment processes through messaging apps or any unofficial communication channels, other than our official careers website. Additionally, Farfetch will never ask candidates for any form of payment during the recruitment process.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Apply for this job

GRC Specialist

Job description