Senior privacy analyst | Lisbon

We are a future-oriented company, committed to excellence and customer satisfaction.

We offer next-generation fixed and mobile solutions, television, internet, voice, and data for all market segments. We are leaders in film distribution and exhibition, being the exhibitor with the most complexes and theaters. We believe in the power of technology to tackle the environmental and social challenges we face. We are part of something greater than ourselves and our ambition is to leave a positive mark on everything we do.

At NOS, we believe that trust is built through integrity, transparency, and responsible information management. If you are motivated to contribute to data protection, system security, and business continuity in a strongly digital transformation context, this could be the next step in your career. In order to continue to ensure and evolve the services we provide, we are strengthening our Security & Privacy team with a Senior Privacy Analyst.

What we expect from you

• Identify and assess security, privacy, and business continuity risks in NOS activities, systems, and projects;
• Define methodologies and approaches for effective risk management;
• Lead and support the implementation of projects and mitigation measures;
• Support the interpretation and application of security, privacy, and business continuity regulations;
• Ensure the application of Security & Privacy by Design and coordinate Risk Assessment exercises (e.g., PIA);
• Contribute requirements and Security & Privacy solutions in transformation projects (Digital, Marketing, Advanced Data Analytics, AI, etc.);
• Manage Security & Privacy initiatives and support the classification/mapping of activities, information, and data (e.g., Activity Treatment Records);
• Review business and technological processes to incorporate security, privacy, and continuity requirements;
• Participate in projects and workshops with reference external entities (ENISA, ETIS, CNCS, among others).

Who we are looking for

• Degree in Management Informatics or Engineering (e.g., Systems, Telecommunications) or similar field;
• Previous professional experience of 3 to 5 years in similar roles, preferably in consulting or complex organizations;
• Experience in consulting in the areas of Risk Consulting, IT General Controls, GDPR, and/or project management;
• Participation in Privacy and Data Protection projects;
• We value knowledge in:
• Information systems and solution architecture;
• Security applied to Personal Data Protection;
• National and European regulations on Personal Data Protection (e.g., GDPR);
• Conducting and performing risk assessments, particularly Privacy Impact Assessments;
• Internal Control and Risk Management;
• Security risk frameworks, such as ISO 27001 and NIST SP 800;
• We value professional certifications in Privacy (e.g., CIPM, CIPT, CIPP or equivalent) and Security (e.g., ISO 27001 Lead Auditor/Lead Implementer or equivalent);
• Knowledge of Data Analytics/Visualization tools and systems (e.g., Power BI), Project Management (e.g., JIRA), and Microsoft Office (Excel, PowerPoint, Word).

What we have to offer

• We promote self-learning and continuous learning through internal initiatives that allow our employees to engage with the latest news and trends in various fields;
• We regularly implement various initiatives to promote well-being, emotional stability, social ties, and work-life balance;
• We offer all our employees a benefits package, as well as discounts on the purchase of NOS products and services;
• We have a wide range of partnerships with exclusive discounts and conditions for our employees.