Senior Information Security Engineer

Five9

Senior Information Security Engineer managing security risks across Five9's infrastructure and services. Collaborating with teams to maintain security risk posture and reporting.

Posted 7/28/2026full-timePorto • 🇵🇹 PortugalSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security risk management, including risk assessment methodologies and frameworks such as NIST CSF and ISO 27001. Proficient in maintaining security risk registers and effectively communicating risk findings to diverse audiences.

Highest-signal resume keywords

Security Risk ManagementRisk Assessment MethodologiesNIST CSFJiraRisk Reporting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Risk ManagementRisk Assessment MethodologiesRisk Treatment DecisionsRisk Acceptance DocumentationRisk Management PoliciesRisk Management FrameworksQuantitative Risk AssessmentQualitative Risk AssessmentSecurity Risk Register MaintenanceRisk Mitigation Plans

Soft Skills

Communication SkillsSelf-DirectedCollaborationEngagement with StakeholdersProblem-Solving

Tools & Technologies

JiraDashboardsMetricsRisk Management ToolsSecurity Tools

Industry Keywords

Information SecurityGRCNIST 800-53ISO 27001PCISOC 2Security Risk PostureVulnerability ManagementComplianceSecurity Program

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Identify, document, and assess security risks across Five9's environment, including production infrastructure, cloud services, corporate systems, and acquired platforms
Maintain the Security Risk Register in Jira, ensuring risks are accurately categorized, assigned to appropriate owners, and tracked through their lifecycle
Engage with service owners, engineering leads, and operations teams to establish risk ownership and drive remediation or mitigation plans
Facilitate the risk acceptance process, including preparing risk acceptance documentation and coordinating approval with appropriate stakeholders
Develop and deliver risk reporting for security leadership and executive audiences, including dashboards and metrics that communicate risk posture clearly
Collaborate with compliance, vulnerability management, and other Information Security functions to ensure risk findings are incorporated into the broader security program
Research and apply risk management frameworks and methodologies to continuously improve program maturity
Contribute to the development of risk management policies, procedures, and playbooks

Requirements

What you’ll need

3+ years of experience in information security, with at least 2 years focused on security risk management or GRC
Demonstrated experience maintaining a security risk register and driving risk treatment decisions with cross-functional stakeholders
Strong understanding of risk assessment methodologies (qualitative and quantitative)
Familiarity with security frameworks such as NIST CSF, NIST 800-53, ISO 27001, PCI, or SOC 2
Ability to communicate security risks clearly to both technical and non-technical audiences
Experience with Jira or similar tools for tracking and managing risk workflows
Self-directed and comfortable engaging directly with service owners, engineers, and leadership to resolve ambiguity around risk ownership.

Benefits

Comp & perks

Five9 Shares
Bonus Scheme
10% Flex Benefit
Meal Allowance
Medical Insurance
Life Insurance
25 day Annual Leave + Public Holidays