CyberSecurity Compliance Officer

About the role

We are seeking a proactive Information (Cyber) Security professional to join Sodexo Business Services in Portugal. The CyberSecurity Compliance Officer will play a key role in strengthening our security and compliance landscape, supporting the continuous improvement of the Information Security Management System (ISMS) and ensuring alignment with ISO 27001, NIS2, PCI‑DSS and other relevant regulations.

Key responsibilities

• Build and manage an annual consolidated Information Security Compliance Programme, providing visibility of audit and assurance activities for Business and IT.
• Deliver security compliance reporting to the CISO, IT and senior business leadership, highlighting risks and issues.
• Coordinate NIS2 compliance activities across multiple regions and maintain risk management accreditation documentation.
• Maintain the ISMS in line with the Statement of Applicability, ISO 27001/27002 frameworks and develop related security policies.
• Conduct regular internal audits, third‑party security assurance assessments and project risk evaluations.
• Collaborate with Legal teams to embed appropriate information security clauses in contracts.

Required profile

• Proactive, detail‑oriented professional with solid experience in information security compliance.
• Strong understanding of European regulatory frameworks such as NIS2, AI Act and PCI‑DSS.
• Ability to work across multiple regions and coordinate with diverse stakeholders.

Required skills

• ISO 27001 and ISO 27002 standards
• NIS2 compliance
• PCI‑DSS
• Information Security Management System (ISMS) implementation and maintenance
• Risk management methodologies (e.g., DART)
• Security audit and third‑party assessment techniques

What we offer

• Opportunity to work in a global leader in quality‑of‑life services.
• Exposure to a wide range of European markets and regulatory environments.
• Collaborative environment with 400,000 colleagues worldwide.