Cyber Security Manager (AWS/ISO 27001) - Portugal Full Remote

ABOUT THE OPPORTUNITY

Join a brand-new fintech start-up division backed by a well-established UK digital retail and financial services group, and help build a secure financial services platform from the ground up. You’ll lead cybersecurity risk, vulnerability management, governance and compliance, using AI tools and agents to automate threat analysis, vulnerability triage, reporting and policy development. This is a hands-on leadership role for someone who wants to define what AI-native security looks like in a regulated environment, with start-up speed and the stability of an established group behind it.

PROJECT & CONTEXT

The group is running a major technology transformation programme covering a new website, order management, customer service and a new credit platform. The fintech division’s platform is preparing for a staged go-live, so you’ll join at a critical moment, working across technology and Financial Services teams. Your main responsibilities will include:

• Managing ongoing cybersecurity commitments, delivering operational security controls, risk and governance frameworks, and Information Security standards
• Delivering the InfoSec technology roadmap while ensuring regulatory obligations are met
• Shaping the Cyber Security strategy, including the secure adoption of AI across the business
• Running vulnerability and patch management programmes, using AI agents to triage findings, assess exploitability and draft remediation
• Designing and continuously improving AI-driven security workflows: alert triage, automated compliance evidence collection and third-party risk assessment
• Identifying emerging threats through AI-driven threat intelligence, and ensuring security data is continuously collected, correlated and analysed
• Defining security KPIs and automating management reporting, escalations and metric analysis with AI
• Building and maintaining security policies and procedures, using AI to draft content and map controls against frameworks
• Preparing the platform for go-live, with security support processes integrated into the wider group
• Acting as the Cyber Security SME for stakeholders and promoting a culture of continuous improvement

WHAT WE’RE LOOKING FOR (Required)

• Proven experience in Cyber Security / Information Security
• Hands-on experience using AI tools and agents (e.g. Claude, Microsoft Security Copilot or similar) for threat analysis, vulnerability triage, policy drafting, reporting and automation
• Strong working knowledge of AWS security services: Security Hub, Control Tower, Organizations, SCPs, IAM, account security, Macie and GuardDuty
• Strong understanding of compliance requirements: DPA, GDPR, PCI DSS v4.0, SOC 1, SOC 2 and ISO/IEC 27001
• Knowledge of OWASP Top 10 for LLM Applications (2025) and ISO/IEC 42001
• Strong understanding of AI security risks, including prompt injection, data leakage and model misuse
• Good awareness of current threats, emerging vulnerabilities and zero-day exploits, and how to mitigate them
• Solid grasp of security risk assessment methodologies: identifying, assessing, prioritising and managing risk
• Experience managing third-party suppliers and vendor risk, including assessment of AI tools and vendors
• Experience developing security policies, procedures, governance frameworks and strategies
• Ability to troubleshoot security incidents and design effective risk mitigation
• Strong stakeholder management and communication skills, with the ability to explain complex security topics to technical and non-technical audiences
• Comfortable in an agile, fast-moving start-up environment, with a curious, decisive and delivery-focused approach
• Fluent English (written and spoken), essential for daily work with UK-based stakeholders

NICE TO HAVE (Preferred)

• Background in fintech, financial services or another regulated environment
• CISSP or OSCP certification

Compensation: €2300 – €3050/month net, depending on experience and seniority level.

Why HumanIT people stay (4.4 Glassdoor, 89% recommend)

• 15th month salary
• Health insurance covering your family
• Birthday off
• Mobility program for digital nomads
• Real work-life balance

Full benefits: What it’s really like:

Originally posted on