Cybersecurity governance and operations specialist | senior

ABOUT THE OPPORTUNITY

We are looking for a Senior Cybersecurity Governance and Operations Specialist to support a hybrid opportunity in Lisbon within the telecommunications sector, strengthening information security governance, access management and application security practices across complex technology environments.

WHAT YOU WILL DO

• Act as the IT interface with Security Operations Center teams, supporting alignment between operational security monitoring and internal information security requirements.
• Define, structure and maintain information security policies, ensuring alignment with business, technology and compliance needs.
• Establish policies for log collection, retention and processing across complex application environments.
• Support the definition and execution of SOC-related policies in SIEM environments.
• Identify, analyze and support the resolution of security weaknesses across the application ecosystem.
• Define and promote an access management model based on functional profiles and role-based access control principles.
• Contribute to vulnerability management activities, supporting prioritization, remediation follow-up and continuous security improvement.

WHAT WE ARE LOOKING FOR

• Senior professional experience in cybersecurity governance, security operations, access management or application security within complex IT environments.
• Strong ability to structure security policies, translate requirements into practical controls and follow through on implementation.
• Experience working with multidisciplinary IT, security and operations stakeholders.
• Responsible, analytical and solution-oriented mindset, with the autonomy required to manage sensitive security topics.
• Ability to work in a hybrid model in Lisbon.

TECHNICAL SKILLS

• Information security policy definition and governance.
• SOC operating models and SIEM-based monitoring processes.
• IBM QRadar.
• User Behavior Analysis and Network Behavior Analysis tools.
• Mobile Device Management and endpoint security tools.
• CrowdStrike or Trend Micro.
• ISO/IEC 27001.
• Role-based access control and identity and access management principles.
• Vulnerability management.
• CI/CD application development processes.
• Log collection, retention and processing policies.

COMPENSATION TRANSPARENCY

Base salary range: EUR 28,000 - EUR 40,000 gross/year

Total compensation: up to EUR 50,000/year

WHAT WE OFFER

• Private health insurance from the first day, with no waiting periods and optional family extension.
• Confidential mental health support through TEAM 24, including psychological support, content and live sessions.
• Continuous development and learning opportunities, including structured training and certification support.
• Flexibility whenever the role and context allow it, supporting sustainable delivery and daily balance.
• Childcare vouchers and practical family support measures.
• Team moments, shared milestones and leadership presence when it matters most.
• Opportunities to strengthen knowledge in information security, cybersecurity best practices and governance-oriented delivery.

EQUAL OPPORTUNITY

Hexa is committed to equal opportunity, inclusion and respectful recruitment practices, aligned with the principles of the Portuguese Diversity Charter. We welcome applications from people with different backgrounds, experiences and perspectives.

HEXA LIFE

At Hexa, every professional is a Builder. We work with honesty, mutual support and agility, contributing to projects, solutions and professional relationships that are built with responsibility, transparency and long-term impact.