Cyber Security Manager – AWS, ISO 27001

This is a fully remote position, open to applicants in Portugal.

📋 Description

• Oversee ongoing cybersecurity initiatives, implementing operational security controls, risk and governance frameworks, along with Information Security standards.

• Execute the InfoSec technology roadmap while ensuring compliance with regulatory requirements.

• Develop the Cyber Security strategy, including the secure implementation of AI throughout the organization.

• Manage vulnerability and patch management programs, utilizing AI agents to prioritize findings, evaluate exploitability, and create remediation plans.

• Design and continually enhance AI-driven security workflows, such as alert triage, automated compliance evidence gathering, and third-party risk assessments.

• Detect emerging threats via AI-driven threat intelligence, ensuring that security data is consistently gathered, correlated, and analyzed.

• Establish security KPIs and automate management reporting, escalations, and metric analysis using AI.

• Develop and maintain security policies and procedures, leveraging AI to draft content and align controls with frameworks.

• Prepare the platform for launch, integrating security support processes into the broader organization.

• Serve as the Cyber Security Subject Matter Expert for stakeholders and foster a culture of continuous improvement.

• Collaborate with technology and Financial Services teams during the phased launch of the fintech platform.

⛳️ Requirements

• Demonstrated experience in Cyber Security / Information Security.

• Practical experience using AI tools and agents (e.g., Claude, Microsoft Security Copilot, or similar) for threat analysis, vulnerability prioritization, policy creation, reporting, and automation.

• Extensive knowledge of AWS security services: Security Hub, Control Tower, Organizations, SCPs, IAM, account security, Macie, and GuardDuty.

• In-depth understanding of compliance standards: DPA, GDPR, PCI DSS v4.0, SOC 1, SOC 2, and ISO/IEC 27001.

• Familiarity with OWASP Top 10 for LLM Applications (2025) and ISO/IEC 42001.

• Comprehensive understanding of AI security risks, including prompt injection, data leakage, and model misuse.

• Awareness of current threats, emerging vulnerabilities, and zero-day exploits, along with strategies to mitigate them.

• Strong understanding of security risk assessment methodologies: identifying, evaluating, prioritizing, and managing risk.

• Experience managing third-party suppliers and vendor risk, including the assessment of AI tools and vendors.

• Proven ability to develop security policies, procedures, governance frameworks, and strategic plans.

• Capability to troubleshoot security incidents and design effective risk mitigation strategies.

• Strong stakeholder management and communication skills, with the ability to convey complex security concepts to both technical and non-technical audiences.

• Comfortable working in an agile, fast-paced startup environment, exhibiting a curious, decisive, and results-oriented mindset.

• Proficient in English (both written and spoken), essential for daily interactions with UK-based stakeholders.

• Experience in fintech, financial services, or another regulated environment (Preferred).

• CISSP or OSCP certification (Preferred).

🏝️ Benefits

• 15th month salary.

• Health insurance that covers your family.

• Day off for your birthday.

• Mobility program for digital nomads.

• Genuine work-life balance.