Idiomas: ENG – C1
\nModelo de trabalho: H\u00edbrido, com presen\u00e7a no escrit\u00f3rio 3 vezes por semana. (Coimbra, Lisboa, Porto ou Viseu)
\nSenioridade: Junior
\nRate: N\/D<\/p>\n
Para entrar em NOVEMBRO<\/p>\n
\u2022\tRole: 1 Information Security Analyst (Internal Security)
\n\u2022\tLocation: Porto, Coimbra, Lisboa ou Viseu
\n\u2022\tSeniority: Junior<\/p>\n
\u2022\tAbout the team
\no\tThe Internal Security team is responsible for our Information Security Management System (ISMS) and protects the company’s own infrastructure, people and data.
\no\tSecurity covers more than our internal systems: it is also part of the certifications and accreditations our customers expect<\/p>\n
\u2022\tTasks
\no\tEndpoint and infrastructure security. Help keep devices and systems managed, compliant and up to date, using endpoint management, patching and network access control solutions
\no\tIdentity and access management. Support access management processes, such as periodic access reviews.
\no\tCompliance, certifications and audits. Contribute to the company’s certification and accreditation efforts, including gathering evidence and preparing for audits.
\no\tISMS processes and documentation. Help write and maintain policies, procedures and records.
\no\tVisibility and reporting. Help build reporting on the security posture of our devices, software and network.
\no\tEmerging topics. Take part in new areas, such as the security of AI tools, as these initiatives start<\/p>\n
\u2022\tWhat we’re looking for
\no\tRequired
\n\uf0a7\tGenuine interest in information security and a willingness to learn.
\n\uf0a7\tFluent written and spoken English.
\n\uf0a7\tAn organised, detail-oriented way of working, with care for documentation and follow-up.
\n\uf0a7\tComfort working with people across the company, from engineers to managers.
\n\uf0a7\tPrior knowledge or experience in information security, through work or studies<\/p>\n
o\tNice to have
\n\uf0a7\tKnowledge of IT infrastructure and its management: endpoints (Windows, Linux), networking fundamentals, identity and directory services.
\n\uf0a7\tHands-on experience with endpoint management, network security or cloud productivity platforms.
\n\uf0a7\tKnowledge of security standards and regulations such as ISO\/IEC 27001, IEC 62443, the Cyber Resilience Act (CRA) or NIS2.
\n\uf0a7\tSome scripting or automation experience<\/p>","protected":false},"excerpt":{"rendered":"
AO7268 \u00b7 Portugal \u00b7 editiondelogiciels \u00b7 Open<\/p>","protected":false},"featured_media":0,"template":"","meta":{"_acf_changed":false,"boond_id":"7268","boond_reference":"AO7268","boond_place":"","boond_place_label":"Portugal","boond_state":12,"boond_state_label":"Open","boond_start_date":"immediate","boond_closing_date":"","boond_answer_date":"","boond_duration":255,"boond_raw_description":"Idiomas: ENG - C1\nModelo de trabalho: H\u00edbrido, com presen\u00e7a no escrit\u00f3rio 3 vezes por semana. (Coimbra, Lisboa, Porto ou Viseu)\nSenioridade: Junior\nRate: N\/D\n\nPara entrar em NOVEMBRO\n\n\u2022\tRole: 1 Information Security Analyst (Internal Security)\n\u2022\tLocation: Porto, Coimbra, Lisboa ou Viseu\n\u2022\tSeniority: Junior\n\n\u2022\tAbout the team\no\tThe Internal Security team is responsible for our Information Security Management System (ISMS) and protects the company's own infrastructure, people and data.\no\tSecurity covers more than our internal systems: it is also part of the certifications and accreditations our customers expect\n\n\u2022\tTasks\no\tEndpoint and infrastructure security. Help keep devices and systems managed, compliant and up to date, using endpoint management, patching and network access control solutions\no\tIdentity and access management. Support access management processes, such as periodic access reviews.\no\tCompliance, certifications and audits. Contribute to the company's certification and accreditation efforts, including gathering evidence and preparing for audits.\no\tISMS processes and documentation. Help write and maintain policies, procedures and records.\no\tVisibility and reporting. Help build reporting on the security posture of our devices, software and network.\no\tEmerging topics. Take part in new areas, such as the security of AI tools, as these initiatives start\n\n\u2022\tWhat we're looking for\no\tRequired\n\uf0a7\tGenuine interest in information security and a willingness to learn.\n\uf0a7\tFluent written and spoken English.\n\uf0a7\tAn organised, detail-oriented way of working, with care for documentation and follow-up.\n\uf0a7\tComfort working with people across the company, from engineers to managers.\n\uf0a7\tPrior knowledge or experience in information security, through work or studies\n\no\tNice to have\n\uf0a7\tKnowledge of IT infrastructure and its management: endpoints (Windows, Linux), networking fundamentals, identity and directory services.\n\uf0a7\tHands-on experience with endpoint management, network security or cloud productivity platforms.\n\uf0a7\tKnowledge of security standards and regulations such as ISO\/IEC 27001, IEC 62443, the Cyber Resilience Act (CRA) or NIS2.\n\uf0a7\tSome scripting or automation experience","boond_criteria":"ABOUT THE OPPORTUNITY\n\nWe are looking for a Junior Information Security Analyst to join an internal security team within the technology sector.\n\nYou will contribute to the protection of corporate systems, information assets and digital infrastructure while supporting information security governance, compliance and continuous improvement.\n\nThis opportunity offers exposure to both technical security operations and Information Security Management System (ISMS) activities, including audit preparation, access governance and emerging cybersecurity challenges.\n\nThe position follows a hybrid working model, with three days per week in the office, in Porto, Coimbra, Lisbon or Viseu.\n\nWHAT YOU WILL DO\n\n- Support the security and compliance of corporate endpoints, infrastructure and network environments.\n- Contribute to device management, security updates, vulnerability remediation and patch management activities.\n- Assist with identity and access management processes, including periodic authorization reviews.\n- Support information security audits, certification activities and compliance assessments through evidence collection and documentation.\n- Maintain and improve ISMS policies, procedures and security records.\n- Monitor and analyze security indicators related to infrastructure, devices, applications and network environments.\n- Prepare security reports to support risk visibility, compliance monitoring and continuous improvement.\n- Collaborate with technical and business teams to promote information security best practices.\n- Contribute to emerging security initiatives, including the governance and secure utilization of AI technologies.\n\nWHAT WE ARE LOOKING FOR\n\n- Academic background or initial professional experience in information security, cybersecurity or related areas.\n- Foundational understanding of information security principles and practices.\n- Professional working proficiency in English, both written and spoken.\n- Strong organization skills, attention to detail and commitment to accurate documentation.\n- Ability to communicate and collaborate effectively with technical teams and business stakeholders.\n- Analytical thinking, curiosity and motivation to develop new technical capabilities.\n- Responsible, proactive and solution-oriented approach to security and compliance activities.\n\nTECHNICAL SKILLS\n\n- Information Security Management Systems (ISMS) and information security governance fundamentals.\n- Endpoint security, device management and patch management principles.\n- Identity and access management (IAM), access control and authorization reviews.\n- Information security compliance, audit evidence management and technical documentation.\n- Security monitoring, reporting and infrastructure security fundamentals.\n\nNICE TO HAVE\n\n- Familiarity with Windows and Linux operating systems and endpoint administration.\n- Knowledge of network fundamentals, directory services and identity infrastructure.\n- Practical exposure to endpoint management, network security or cloud productivity platforms.\n- Familiarity with ISO\/IEC 27001, IEC 62443, the Cyber Resilience Act (CRA) or the NIS2 Directive.\n- Basic scripting or automation capabilities.\n\nWHAT WE OFFER\n\n- Private health insurance from your first day, with no waiting period and optional family extension.\n- Confidential psychological support through TEAM 24, including professional assistance, educational resources and live sessions.\n- Continuous learning opportunities, including access to training and professional certification development.\n- Opportunities to strengthen expertise in information security, cybersecurity best practices and AI governance.\n- Flexible working arrangements whenever compatible with the role and operational requirements.\n- Childcare vouchers and support measures that promote work-life balance.\n- Team initiatives, knowledge-sharing opportunities and a collaborative professional community.\n- A people-centered environment that values professional growth, well-being and long-term development.\n\nEQUAL OPPORTUNITY\n\nAt Hexa, we are committed to equal opportunities, inclusion and respect for individual differences. In alignment with the principles of the Portuguese Diversity Charter, we welcome applications from people with diverse backgrounds, experiences and perspectives. Recruitment decisions are based on professional qualifications, competencies and role requirements.\n\nHEXA LIFE\n\nAt Hexa, we are all Builders.\n\nWe believe meaningful progress comes from people working together, sharing knowledge and taking responsibility for what they create.\n\nOur culture is built on three pillars: Honesty, Mutual Support and Agility. These principles guide how we collaborate, overcome challenges and deliver lasting value.\n\nAs a Hexa Builder, you will be part of a connected community where your contribution matters, your development is encouraged and collaboration extends beyond individual teams and projects.\n\nWe Build Together.","boond_expertise_area":"editiondelogiciels","boond_is_visible":true,"boond_created_at":"2026-10-27T12:39:06+0100","boond_created_ts":1793101146,"boond_updated_at":"2026-11-05T11:17:52+0100","boond_type_of":1,"boond_mode":1,"boond_active_positionings":2,"boond_manager_id":"17496","boond_agency_id":"1","boond_agency_label":"Hexa Consulting","boond_pole_id":"1","job_location":"Portugal","job_contract":"editiondelogiciels","job_business_unit":"Hexa Consulting","job_seniority":"Junior","job_title_without_seniority":"Information Security Analyst","job_remote_url":"","job_source":"boond","manatal_hash":"","manatal_status":"","job_last_synced_at":"2026-11-05 22:53:04"},"class_list":["post-9358","company_job","type-company_job","status-publish","hentry"],"blocksy_meta":[],"acf":[],"_links":{"self":[{"href":"https:\/\/www.hexa-group.pt\/es\/wp-json\/wp\/v2\/company_job\/9358","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hexa-group.pt\/es\/wp-json\/wp\/v2\/company_job"}],"about":[{"href":"https:\/\/www.hexa-group.pt\/es\/wp-json\/wp\/v2\/types\/company_job"}],"version-history":[{"count":4,"href":"https:\/\/www.hexa-group.pt\/es\/wp-json\/wp\/v2\/company_job\/9358\/revisions"}],"predecessor-version":[{"id":9366,"href":"https:\/\/www.hexa-group.pt\/es\/wp-json\/wp\/v2\/company_job\/9358\/revisions\/9366"}],"wp:attachment":[{"href":"https:\/\/www.hexa-group.pt\/es\/wp-json\/wp\/v2\/media?parent=9358"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}