Risk Officer for Shadow IT

About the Position

Risk Officer for Shadow IT

Porto, Portugal

Inetum is a European leader in digital services. Our team of 28,000 consultants and specialists strive every day to make a digital impact for businesses, public sector entities, and society. Our solutions aim at contributing to our clients’ performance and innovation as well as the common good.

Present in 19 countries with a dense network of sites, Inetum partners with major software publishers to meet the challenges of digital transformation with proximity and flexibility.

Driven by its ambition for growth and scale, Inetum generated sales of 2.5 billion euros in 2023.

---

Responsibilities

• Management of the Risk Register:
  • Update regularly IT risks criteria over time (risk category, owner, impact…)
  • Initiate & support the annual review of all IT risks in the Risk Register
• Support risk assessment:
  • Organize with relevant stakeholders the assessment/analysis about identified IT risks (e.g.: impact, mitigation…)
  • Organize the validation of IT risks assessment
  • Organize the compliance with the BNPP Risk Management process
  • Collect new risk cards and challenge them with relevant stakeholders (e.g.: mitigation suggested)
• Reporting:
  • Gather feedback regarding formalization of risk cards & ongoing mitigation measures from risk owners
  • Follow KPI defined in risk cards (mitigation, impact…)
  • Perform a reporting about risks and risks mitigation to the top management, raise alerts if needed
  • Participate to the Business Line Risk committee to share inputs about risks (risks stored in Risk Register, level of risks, impact…)

---

Requirements

• Proven experience in IT Risk Management Methodologies, and knowledge in the following steps under IT Risk plan/ framework:
  • Risk monitoring (knowledge in risk management: ability to identify, alert and suggest remediation)
  • Risk analysis (ability to anticipate/analyze threats and create risk scenario) and - Risk opinion (ability to challenge, approve and decide (new activities, projects…)
• IT general knowledge (global knowledge of IT, its major processes and assets & solutions) and Cybersecurity (general knowledge in cybersecurity risks, frameworks, and requirements) GRC (Governance, Risk and compliance) for IT
• Regulatory (general knowledge in IT and cybersecurity regulators framework) and Compliance (global knowledge of compliance, its major processes or regulatory framework)
• Shadow IT ( (eg. IT assets outside the IT governance) Management
• Organizational skills:
• Ability to collaborate / teamwork
• Decision making
• Analytical ability/ Critical thinking / Attention to detail & Rigor
• Autonomy

---

Nice to Have

• Fluent in English
• French is a plus

---

We Offer

• Competitive salary
• Opportunity to work with a leading European digital services company
• Professional growth and development opportunities

---

About the Company

Inetum is a European leader in digital services. Our team of 28,000 consultants and specialists strive every day to make a digital impact for businesses, public sector entities, and society. Our solutions aim at contributing to our clients’ performance and innovation as well as the common good.

Present in 19 countries with a dense network of sites, Inetum partners with major software publishers to meet the challenges of digital transformation with proximity and flexibility.

Driven by its ambition for growth and scale, Inetum generated sales of 2.5 billion euros in 2023.