At Devoteam, we believe that technology with strong human values can actively drive change for the better. Discover how Tech for People unlocks the future, creating a positive impact on the people and the world around us. We are a global leading player in Digital Transformation for leading organisations across EMEA, with a revenue of €1B. We believe in transforming technology to create value for our clients, partners and employees in a world where technology is developed for people.

We are proud of the culture we have built together. We are proud of our people at the service of technology. We are proud of our diverse environment.

Because we are #TechforPeople. Join our multidisciplinary team of Cloud experts, Designers, Business consultants, Security experts, Engineers, Developers and other extraordinary talents, spread across more than 20 EMEA countries. Become one of our +10.000 tech and business leaders on cloud, data and cyber security. Let’s fuse creativity with technology together and build innovative solutions that actively change things for the better.

We're looking for a detail-oriented and analytical GRC Analyst to join our nearshore team in Lisboa, Portugal. In this role, you will be responsible for supporting the governance, risk, and compliance functions of our organization. You will work with cross-functional teams to identify, assess, and mitigate organizational risks while ensuring adherence to regulatory requirements and internal policies. This position offers an excellent opportunity to develop your expertise in compliance frameworks and risk management within a dynamic, professional environment.

• Conduct risk assessments and analyze potential compliance gaps across business processes and systems
• Monitor and evaluate adherence to regulatory requirements, industry standards, and internal control policies
• Prepare and maintain comprehensive compliance documentation, audit trails, and evidence repositories
• Support the development and implementation of governance frameworks and compliance procedures
• Perform data analysis to identify trends, patterns, and areas requiring remediation or improvement
• Collaborate with internal stakeholders to develop and execute corrective action plans
• Assist in the preparation of compliance reports and presentations for management and audit committees
• Stay current with evolving regulatory requirements and industry best practices
• Participate in internal and external audit activities, providing necessary documentation and explanations
• Support the organization's risk management initiatives and contribute to continuous process improvement

• 2-5 years of professional experience in GRC, compliance, risk management, audit, or a related field
• Strong knowledge of compliance frameworks and standards (ISO 27001, SOC 2, GDPR, HIPAA, or similar)
• Demonstrated experience with risk assessment methodologies and internal control evaluation
• Proficiency in data analysis and the ability to work with large datasets
• Excellent organizational and time management skills with the ability to manage multiple priorities
• Strong written and verbal communication skills in English; Portuguese language skills are a plus
• Proficiency with Microsoft Office Suite and experience with GRC software tools (Archer, Workiva, or similar) is preferred
• Experience working in nearshore or offshore environments is preferred
• Familiarity with audit processes and audit management is preferred
• Ability to work independently and collaboratively within a team environment
• Detail-oriented mindset with strong attention to accuracy and compliance requirements

The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization. All of our vacancies are open to people with disabilities.