Head of Cybersecurity (GRC) / vCISO NIS2/DORA
NimberPorto, Portugal
Posted December 12, 2025
Full Time
About the Company
Nimber is a forward‑looking technology consultancy that partners with enterprises to design, build, and deploy innovative digital solutions. The firm specializes in consulting, turnkey projects, and nearshore delivery, enabling clients to accelerate time‑to‑market while optimizing cost and talent. In addition, Nimber offers robust cybersecurity services and end‑to‑end quality assurance—including crowd‑testing—to protect and validate applications across the development lifecycle. By blending cutting‑edge technology with a flexible, client‑centric delivery model, Nimber delivers measurable business value and a competitive edge in a rapidly evolving market.
Job Description
Nimber Cyber Defend is looking for a senior security leader to lead their security program and drive NIS2/DORA readiness. The ideal candidate has experience in GRC and security programs, with a track record of delivering NIS2/DORA or ISO 27001 in production environments.
Requirements
- 8+ years in Information Security
- 3+ years leading GRC / Security Programs
- Track record delivering NIS2/DORA or ISO 27001 in production environments
- C|CISO, CISSP, CISM, ISO 27001 LA/LI, CCSP, AZ-500/SC-200 certifications
- Comfortable with Azure/M365 security, Entra/Okta, Sentinel/Splunk, EDR ecosystems
- Strong executive communication skills
- Fluent English; Portuguese is a plus
Benefits
- Impact, not theater: boutique team, hands-on engineers, fast time-to-value
- Greenfield & autonomy: help shape our Cyber Defend playbooks, tooling, and hiring
- Growth & learning: budget for certs/conferences, peer coaching, and modern stacks
- Hybrid by default (Lisbon/Porto), flexible schedule, trust-first culture