17 - IT Risk & Compliance Advisor

Are you looking for a company specializing in Project Management, Business Analysis, and Agile Transformation?

PPM Coachers offers a comprehensive and integrated range of services, covering both traditional components and Agile approaches. Our services include Strategic Consulting, with a focus on designing Demand Management Office (DMO), Project Management Office (PMO), and Service Management Office (SMO) models. We also provide implementation and operationalization of processes, techniques, and tools, along with capacity reinforcement (outsourcing) and competency development, which serve as essential tools to support the organizational transformation inherent in evolutionary processes.

Why choose PPM Coachers?

You will have the opportunity to participate in key projects with major national and international players in the market, allowing you to apply your knowledge in Project Management, Business Analysis, and Agile Transformation.

We have an experienced, solid, and dynamic team that will accompany you personally on your journey and help you develop skills in our areas of expertise.

You will enjoy a wide and flexible benefits package, including health insurance, discounts and benefits, a telecommunications plan, and more.

PPM Coachers is recruiting for the position of IT Risk & Compliance Advisor!

Your Mission

• Manage compliance assessments of IT solutions, ensuring alignment with internal policies and regulatory standards (ISO 27001, GDPR, PCI-DSS, among others).
• Coordinate communication among technical stakeholders, solution owners, auditors, and security teams.
• Analyze dashboards and reports (Power BI, GRC tools) to identify risks or compliance gaps and propose corrective actions.
• Follow up on findings from internal/external audits and security testing (e.g., penetration tests), ensuring proper remediation.
• Contribute to the definition, evaluation, and continuous improvement of the corporate control framework.
• Support local markets in implementing GRC best practices and preparing for audits
  
  

Minimum Requirements

Technical Requirements:

• At least 3 years of experience in compliance, GRC, IT audit, or information security roles.
• Practical knowledge of regulations and standards such as ISO 27001, NIST, GDPR, PCI-DSS, and control frameworks.
• Familiarity with cloud environments (AWS, Azure, GCP) and audit/compliance tools (ServiceNow, Archer, etc.).
• Ability to interpret and communicate technical and operational data via reports or dashboards.
  
  

Additional Assets

• Certifications such as CISA, CISM, ISO 27001 Lead Auditor/Implementer, or similar.
• Experience in large corporations or multinational environments.
• Previous involvement in the implementation of GRC tools or global security frameworks.
  
  

Fluent Portuguese - (Mandatory).

Fluent English (C1): essential for daily communication and documentation.

Knowledge of French or Spanish is a plus.

Work Model: 100% remote regime, with Spanish Working Hours (It is necessary to be in Portugal)