{"id":3633557,"url":"https://alion.io/job/roboyo-ai-information-security-compliance-consultant","title":"Information Security & Compliance Consultant","company":{"id":685496,"name":"Roboyo AI","domain":"roboyo.ai","url":"https://alion.io/company/roboyo","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Porto, Portugal"],"countries":["PT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"GDPR","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 13485","optional":false},{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-11-02T17:57:10Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-03T14:48:20Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Roboyo AI is a category shaper in Applied AI and Agentic Automation. We help leading enterprises move from automation projects and AI experiments into governed, production-grade systems that execute real work across workflows, processes, products and services. \nOur heritage is in scaled enterprise automation; our future is Applied AI and Agentic Automation: autonomous agents, AI engineering squads, process orchestration, data and knowledge foundations, and human-in-the-loop governance embedded deeply into how our clients operate. \nWe are not here to sell AI theatre. We are here to turn AI into working systems, measurable outcomes and repeatable transformation programs. \nABOUT THE ROLE\nWe are looking for an Information Security & Compliance Consultant to manage and deliver client projects in the areas of information security, cybersecurity, data protection and regulatory compliance.\nThe successful candidate will take ownership of a portfolio of clients and projects, supporting organisations in the implementation, maintenance and continuous improvement of ISO/IEC 27001 Information Security Management Systems (ISMS) and in their compliance with regulatory frameworks including NIS2, DORA and GDPR.\nThe role combines strong technical and regulatory knowledge with hands-on consulting, audit preparation, risk management and client relationship management. The consultant will also contribute to the maintenance and continuous improvement of Roboyo's internal management systems.\nMAIN RESPONSIBILITIES\nLead the implementation, maintenance and continuous improvement of ISO/IEC 27001 Information Security Management Systems (ISMS) for clients.\n\nPerform ISO 27001 gap assessments, readiness assessments and support organisations throughout certification and surveillance audit processes\n\nSupport organisations in assessing and implementing requirements arising from NIS2, including governance, cybersecurity risk management measures, incident management, business continuity, supply-chain security and compliance monitoring.\n\nSupport financial-sector clients and ICT service providers with DORA compliance, including ICT risk management, incident management, operational resilience and ICT third-party risk.\n\nProvide GDPR/data protection advisory services, including privacy governance, risk assessments, policies, procedures and, where applicable, DPO services.\n\nConduct and coordinate information security risk assessments, supporting the definition and monitoring of risk treatment plans.\nDevelop, review and maintain information security and compliance documentation, including policies, procedures, risk registers, Statements of Applicability and supporting evidence.\nCoordinate and/or perform internal ISO 27001 audits and support external certification audits.\nCoordinate activities with certification bodies, auditors, customers and specialised cybersecurity providers.\nSupport customers in establishing and improving third-party/supplier security and due diligence processes.\nSupport incident management, business continuity and information security governance activities.\nIdentify compliance gaps and define pragmatic remediation plans with customers.\nManage multiple customer engagements, including project planning, deliverables, service hours and agreed milestones.\nParticipate in customer meetings, workshops, presentations and demonstrations of consulting services and compliance solutions.\nContribute to commercial activities, including demos, explore meetings, scope definition, effort estimation and preparation of proposals for information security and compliance project\nMANDATORY REQUIREMENTS \nHigher education in Information Security, Cybersecurity, Information Systems, Engineering, Management, Law or a related field.\nProven hands-on experience implementing and/or maintaining ISO/IEC 27001 ISMS.\n\nPractical knowledge of ISO/IEC 27001:2022 requirements and information security risk management.\n\nDemonstrable knowledge and project experience related to NIS2 requirements and cybersecurity governance.\n\nStrong knowledge of GDPR and data protection principles.\nKnowledge of DORA and ICT risk/compliance requirements.\nExperience preparing organisations for internal, certification and/or surveillance audits.\nAbility to develop information security policies, procedures, risk assessments and compliance documentation.\nStrong customer-facing and stakeholder-management skills.\nAbility to manage multiple customers and projects independently.\nGood written and verbal communication skills in Portuguese and English.\nCERTIFICATION\nAt least one of the following certifications, or equivalent recognised certification:\nISO/IEC 27001 Lead Implementer\nISO/IEC 27001 Lead Auditor\nCandidates holding both Lead Implementer and Lead Auditor certifications will be strongly preferred.\nVALUED REQUIREMENTS\nBoth ISO/IEC 27001 Lead Implementer and Lead Auditor certifications.\n\nDPO / Data Protection certification.\n\nAdditional information security or risk certifications.\n\nExperience with ISO/IEC 27701 Privacy Information Management Systems.\n\nExperience with other management system standards, particularly ISO 9001, ISO 22301, ISO 37001 or ISO 13485.\n\nExperience with third-party risk management, supplier assessments and due diligence.\n\nExperience with business continuity, incident response and operational resilience.\n\nExperience coordinating penetration testing, vulnerability assessments or other cybersecurity assurance activities with specialist providers.\n\nPrevious consulting experience and responsibility for managing a portfolio of customers.\n\nExperience preparing commercial proposals and estimating information security/compliance projects.\n\nBEHAVIOURAL PROFILE\nAutonomous and accountable, able to take ownership of client engagements from assessment through implementation and audit.\n\nStrong organisational skills and ability to manage multiple clients, priorities and deadlines simultaneously.\n\nAnalytical mindset with strong attention to detail.\n\nAbility to translate complex regulatory and technical requirements into practical actions for customers.\n\nProactive approach to identifying risks, compliance gaps and improvement opportunities.\n\nStrong written and verbal communication skills, particularly in customer-facing environments.\n\nComfortable facilitating workshops and interacting with management, technical teams, auditors and external partners.\n\nPragmatic and solution-oriented approach to compliance.\n\nStrong team spirit and willingness to collaborate with internal and external specialists.\n\nWe are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.\nPrivacy Notice: By applying, you consent to the processing of your personal data for recruitment purposes in line with our Privacy Policy: https://roboyo.global/data-privacy/","description_format":"text","description_chars":6950,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Portuguese","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Workflow & Process Automation (RPA, BPM)","AI Agents","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-11-02T20:39:54Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":36,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/roboyo-ai-information-security-compliance-consultant","json_url":"https://alion.io/job/roboyo-ai-information-security-compliance-consultant.json","meta":{"generated_at":"2026-11-03T15:24:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21459,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":685496},"rest":"https://alion.io/mcp/rest/get_company?id=685496"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Froboyo-ai-information-security-compliance-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Froboyo-ai-information-security-compliance-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Froboyo-ai-information-security-compliance-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/roboyo-ai-information-security-compliance-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Froboyo-ai-information-security-compliance-consultant"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3633557}},{"tool":"search_jobs","arguments":{"company":"roboyo.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3633557},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}