Governance, Risk and Compliance Specialist

Governance, Risk & Compliance

Mid-level

Lisbon

As a Governance, Risk, and Compliance Specialist, you will support the development, implementation, and continuous improvement of governance frameworks that ensure accountability, ethical conduct, and compliance with regulatory standards at Xpand IT. This role includes advising top management and the board on best practices and ensuring alignment with evolving regulatory standards.

Your role

You will be part of the compliance team, conducting internal and external audits, ensuring the effective execution of administrative processes, and supporting relationships with external partners, including auditors and legal consultants. You will also contribute to developing and evaluating corporate policies, ensuring alignment with governance and risk management objectives. A key part of this role is implementing and managing tools that support and automate compliance processes, risk assessments, and audits, ensuring that systems are in place to monitor, report, and enforce compliance standards. Your expertise will help teams adopt these tools and support senior management in efficiently managing governance and compliance challenges.

Daily responsibilities:

Develop and implement governance frameworks and policies to ensure accountability, ethical behavior, and effective decision-making;
Support the board in governance best practices and ensure compliance with applicable laws and regulations, including labor laws and data privacy regulations;
Maintain compliance programs, conduct audits, and support updates and continuous improvements to our code of ethics;
Participate in the implementation and management of operational support tools;
Assist colleagues with legal requirements, prepare reports for stakeholders, and coordinate with external auditors;
Monitor regulatory changes and investigate compliance violations, implementing corrective actions as needed.

Job requirements

Academic background

Bachelor’s and/or Master’s degree.

Professional experience

More than 3 years of experience in Compliance and Governance, ensuring adherence to regulatory standards and best practices.

Knowledge at a legal and operational level

Deep understanding of industry laws and standards affecting operations.

Knowledge of GDPR

Solid knowledge of GDPR and ISO 27001.

Problem-solving and ethical behavior

Ability to promote ethical behavior and manage conflicts of interest and strong problem-solving skills to assess governance risks and compliance gaps.

Languages

Fluency in English, spoken and written.

Nice to have:

Experience in the IT sector;
Experience with Atlassian tools (e.g., JIRA or JIRA Service Desk);
Certifications such as CCGP or CCEP;
Understanding of the CMMI framework;
Knowledge of DORA regulation;
Familiarity with NIS and NIS2 directives.