Cybersecurity Specialist
Lisboa, PT
Our company is part of EDP, a global energy group present in around 30 markets with a particular emphasis on renewable energies. With more than 45 years of experience, we have been consolidating a relevant presence on the world energy scene based on the commitment to be all-green by 2030, leading the energy transition. With more than 13,000 employees around the world, we are committed to using our energy and heart to drive a better tomorrow.
The EDP Group is an integrated energy utility, with operations around the world.
Within its electricity transmission and distribution activity (the EDP Networks Platform) it currently manages operations in Portugal, Spain, and Brazil
Mission Critical - Cyber Resilience department is looking for an Cybersecurity Specialist
What you will do:
• Investigate and respond to Cybersecurity events and incidents, according to the procedures defined in the E-REDES incident management process;
• Act in accordance with the norms and policies governing E-REDES Cybersecurity operations and its information security policy;
• Analyze systematic failures in policies, procedures, networks, or systems following Cybersecurity incidents, identifying appropriate measures for their mitigation;
• Conduct risk assessments and business impact analyses to identify critical assets and potential disruptions;
• Contribute to the development and testing of business continuity and disaster recovery plans;
• Support cyber resilience exercises and simulations across business units;
• Collaborate with solution architects and engineering teams to ensure secure design and implementation of systems and services;
• Review technical designs and propose security controls aligned with best practices and frameworks (e.g., ISO 27001, NIST);
• Assist in defining security requirements for new projects and technologies;
• Act as a liaison between the Cyber Resilience team and business units to understand operational needs and risks;
• Provide guidance on security best practices, policies, and awareness initiatives;
• Translate technical risks into business impacts and communicate them effectively to non-technical stakeholders;
• Support the implementation and enforcement of security policies, standards, and procedures;
• Assist in audits, compliance assessments, and reporting activities;
• Track and report on risk mitigation activities and control effectiveness.
Employment type: Full-Time
Work site: Hybrid Model
What are we looking for:
• Master's degree in Computer Engineering, Electrical and Computer Engineering, or a similar field.
Professional Experience:
• Up to 5 years of professional experience in activities related to information security: security architecture, implementation of security technologies and/or cybersecurity operations and incident response and/or risk analysis and/or management of operational indicators and/or implementation of security controls.
• Proven ability to engage with business stakeholders to understand operational needs and translate them into security requirements.
• Experience in conducting security awareness training, workshops, or tabletop exercises.
• Hands-on experience designing or reviewing secure architectures for applications, networks, or cloud environments.
• Familiarity with security frameworks (e.g., NIST, ISO 27001, ...) and secure design principles.
• Experience in SOC (Security Operations Center) activities and certifications in the areas of communication networks and cybersecurity is valued.
More than academic knowledge and technical skills, we are looking for ambitious people who are enthusiastic about the future and who bring human skills aligned with our purpose.
Equal opportunities for all
Our vision is that each person combines their unique characteristics and experiences to fulfill our mission of creating new energy for the planet. We are an inclusive employer, ensuring all candidates are treated fairly throughout the recruitment process. We welcome and value all people, and we are committed to fostering a sense of belonging for each person who is part of the EDP group.
Need more reasons to apply?
As a top employer we:
Empower our employees through a positive and innovative work environment that promotes collaboration and agile decision-making;
Respect and value each person, providing a flexible, healthy, and inclusive workplace with a range of attractive benefits;
Provide a meaningful work experience and prepare our people for future challenges through different opportunities for development and internal mobility;
Our efforts have resulted in several distinctions over time, highlighting the EDP group's strong positioning and its dedication and commitment to attracting and retaining the best talent:
Top employer certification by Top Employers Institute
Part of the Bloomberg Gender-Equality Index
Global certification as a family-responsible company by Fundación Másfamília
Top 100 Workplaces by Houston Chronicle
Discover our tips to enhance your performance during the recruitment process and apply until June 20th, 2025 if you think you are the right fit for this opportunity.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Agile Audits Cloud Compliance Incident response ISO 27001 NIST Risk analysis Risk assessment SOC
Perks/benefits: Career development Team events
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.